last executing test programs: 1m31.831524848s ago: executing program 0 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2b, 'memory'}, {0x0, 'net_cls'}, {0x2d, 'perf_event'}, {0x2b, 'cpuset'}, {0x2b, 'blkio'}, {0x2d, 'cpuset'}, {0x2b, 'rdma'}, {0x2d, 'cpuacct'}]}, 0x43) mkdirat(r0, &(0x7f00000002c0)='./config\x00', 0x63) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x66, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a30000000001400028006000100f5020000050002002000000008000500000000002c0004800800010000800001200002800c000100706f8369637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400441, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c010000290001"], 0x16c}}, 0x0) tkill(r4, 0x32) 1m31.831317097s ago: executing program 0 (id=845): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000240)=0x1f, 0x4) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, 0x0) read$ublk_bdev(0xffffffffffffffff, &(0x7f00000002c0)=""/220, 0xdc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="9db8180000004f0c1e000000000001685e396aff7f"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m31.781054451s ago: executing program 0 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x88000}, {}, {}, {0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x2, 0xc}) r2 = getpgrp(0x0) setpriority(0x1, r2, 0x9) r3 = socket$alg(0x26, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) process_vm_readv(r2, &(0x7f0000000640)=[{&(0x7f0000000240)=""/128, 0x80}, {&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000540)=""/42, 0x2a}], 0x3, &(0x7f0000000780)=[{&(0x7f0000000680)=""/60, 0x3c}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/58, 0x3a}], 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8b2b, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff00010000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="c000000040800000140012800b0001006272696467650000040002800a0001000e1d6c77e1610000"], 0x40}}, 0x0) 1m31.651189607s ago: executing program 0 (id=848): r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) r4 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) io_cancel(r1, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x8, 0xc8, r0, &(0x7f0000001880)="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", 0x1000, 0x3553, 0x0, 0x3}, &(0x7f00000028c0)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010103000000000000001c"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x20000810) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r7, 0x5390, &(0x7f0000000680)=@disckey={0x2, 0x3, "96c248a9892913a8ce107a3a3150bdde7d4622b94c01aa1856508d1d1318cbc623f49a1914c88d42d07d0ab0cec1cc79c1b0ae10cb02ce0ce6315d863224465be519e17f17d562546fd3e8b83460bc5f2919284e348b69d6f4bf15ccceea8577b0c4e46397a66afae10e15876ecea802109a918b5a814e7bbc10e516b665a158289d440a937d38157c71f992de2fa8e8aa6f4eb018695ae303735f0e2b59db6ad0e2cb57fab054746fdebc62cc79070eaaa894b656943c0b11dce38fbb6210916e3fe3ac29a3c61026957f39149ba3d84e883b8d82b3c44c40a221805a6548ff69e8dc9667885fa329916a62080839a87ec56164ccf6c811b699976c70538f1a404a391316b57f69e247439b50b20f7c356144c7f21eeb9d3000560a57f8a141621e2d3658c46f7c7298531afb7b3ca4b0a1b9512f76212bc3993539ce9ca07e155e86f5192fde81ef6e0f61ec054274dc5af8c2b0cb0d77d1d2629a9bd3efe59ea880e9e364bebb92f1be8d94bc816bef9cd4672abd532690cf02aae1ec6f3173a74bcc0b60d2adac032c329962bfdfda317977ff22fe685acf7462905c047944a67e03a4921a5fd844ba64b6a11fbc1cc4b8ec472ddcb0529a542b2a600505850d70bf0377fdeeabc4517f3845e30c76ac9965243d3bcd783326b7f41eaf7f950d9bdb29b6d5ef99c50a64f485cb591a2c06fad9102bb71e6344d99fd1b71130461a1221a9a991f6a30f7eb16a2bd5afe2d5e9a0b5de3d58257023530490fc785608183a635bf823fdd825044b3b69fd22e888c6af03ac45a301e332049befe2705ab590122d541e9ec03b5b2b22cb68ecb2d5789df5d5ff7fc011c2c04ed836250481ecc474dc884b0d94eb58b16c2cc161cceb8d7c150c1f0fd1a66082a55f8ab6e82fb7ff23a49a7fd16bad6530e222b716cfda6db8de09895e57dfbda4f8bbb0904d62766e3c4287a9c24dbb2e926df4b28f0e690e1fed11884f3b19d08001275093b127bebf6722c3f9d36215a01799ca4151f3b9fe91db08e5d99e0caabab62de35d53b83e72c604e69d075aefe4bdb445849ad963f8d336bdd0ef9c3ce58300ab2d849a96dac61053a7e062bac4fc70a65db5ba6ed932cae0c2fc9914938ffe8d66c604d3d75e85bff6dddf84b3e48acbfeaf9c9a447e328a4d4aa551dab9501026522d3eb0060aeb6cad1ab443d526ac5823e3eeb60b318feb456216a200c88af807d71c431a11c3d13d843a7aedf69fd861a4ddde56648c8d9a138a59f7b9905a09efad5f3a0b4ce204324619dbe55f51e3c3bddad34d6e0c2b7b8f6818d146ae5c5c26ed6a75649a549afff07e615c5ad948419edd237cb2335ad61256d7174dcafb00dd7ba544d0a6086d5468520de6d8b78dc21103af6804d6bdece4a52b14fe9fbd2bc4746ba4b8783d2431b64fe2c5ad87b3d45761eb164c006de762465fe4721d1d5d8ad8dc8c0c60f4d2cb2d87ded735eb05f17058ad66702a84ffe8a34b617fc0596b10c3ce7245aef8b33cc8333f37f98f53a46e7672ec208e0d41a1ed4862a5a972b756a665d157d592603cde7191828aa6dca37edd60ce55f6d055ea1a87fd34bc9cbbc1f545eb8ba07e68355ffd8d666e1654cdb5da4292275afbd085a2b5045aafc7f6983673e1be6994074f93af426d10e8d2e6a3a0cf6cf88ca501617e162f7890d79367423d916f3b835bdce7fe2d36b2728ac003726b25d03661944e32c97c2d1e5f1b38df41649463d61b0fae2205c7760693233d980a0d097d520d937db01599e7f97502b48098ccdca946891c542849b134edb47e18c65002f00f5c97a51c19a9b9f5207671af6e03602ea6acc5f1ad0c0d8845657d55469e3e57afffc4d36e4d7e09f5c650db5d4af25ac93e45aed0792dfcdcdc118f8072b1fefe76f0acc96556aad4d392db7b504136db6643a7f2e34a555880c0e5d6754b5792de4ebc0638a25c3ffb54851058f4b9c8157e9855d588d4ea1807446d08375c122564f3335269becd5e2609976aca20e78ea8fa6d4872efc3f2e4bbc245ff9aba2ed9bd02862a78c77bc41b7094b86dafa61bbef2ed35680ac8897613a09ef7f8c2fe7436ac05adfa124387741340eab3be561641a9b812f26f9c6e831136551bfa040afabc206f089ce9edd0c757265a0189db90294f11464862dcf5f3ca13bceeb6a9c349a2b24e10d9f20f91a0ce32d949d876efbb10cc37c43cab6ee0dcd4eb7d6cfa1a6176db524b550dd460505b5f67c9a92b3962af20da4e7b1a75b6cf34e2fe260d9d5eb22cbed73c082685555f6107f8c9d33d0c1b33764d986e9fc0b443d0b353d81c2086089fbc0c6051480336fb237762275c279f9fe68f194d25d8d94d0b9a84818826e03b84a501c6b0b794db651f72f8cc0e001452f90f73939fe54e5f3fa04782242ec32c53c8894096d2579b62557f6f97d1ae36f791ec294b61dcb438d9c0098931bfd5102d05650f16cc2a11ef98d4550d130d17c9444563864dae781c99d15b04a4bd16c178c22be2d7f19d5defdb00288fef32456e56d392616ff86b8da3b584e538d1dbc940f3a02833834d141d74e11054a3dfd397af07683791289b5231cb2713c67e8efed9b2f3738d3d9e0fe56055d35fe1f4cd0b7401b0a3a03c162fb8a72b2461ffd2245d2caf5afb52ddcaf30ed92d17831cfa7b7bb0b2bef3b47ecba17aaec7144b85a5f0dcc1db1d819ddb4e3dfb6410500dd7a549a18057edac03fcead9eae28b6a86a9c73897615e99b561ae35a3003ca0635d40bcca47cb5fe97b65942febd9d747d732aa94f8c7430a053878ab5a678e53d98f3dbf947ac31ce1072ab15902a8e4b6b23c0cc3d810ce9ec70d6d402bca024a1f93d0bcf6fb5ea47ed737b1d3ed5df39521"}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x1a00200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 1m31.471373309s ago: executing program 0 (id=849): setns(0xc9, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r7, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x82}, {0x4, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r4, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)='t', 0x1}], 0x1}, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x19, 0xfffffffffffffffd, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000040)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2000, 0x0) sendmsg$nl_xfrm(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m30.95097085s ago: executing program 0 (id=856): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001200010afcffffff5655f937f2efa99f77c0c401000000000a000000100083800a005c803fc82d8ff9670000"], 0x24}}, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c007d11b781afceb5b785f8ff538d1500001800ffff000b00000000000000fd0900743100"], 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d848d41f5540b9ac94280000000107030d0000000000000000020000061400078008000140ffffff"], 0x28}, 0x1, 0x0, 0x0, 0xa053}, 0x20880) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x405e, 0x7, 0x264}, 0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r1, @ANYRESHEX, @ANYRESHEX=r7, @ANYRES8=r6], 0x130}}, 0x28044010) recvmmsg(r9, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/205, 0xcd}], 0x3}, 0x7f}], 0x1, 0x10002, 0x0) (async, rerun: 32) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES32=r3, @ANYRES64=0x2710], 0x48}}, 0x4000001) (async, rerun: 32) mprotect(&(0x7f0000cce000/0x4000)=nil, 0x4000, 0x1) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r10, 0x8}}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (rerun: 64) 1m30.866916576s ago: executing program 32 (id=856): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001200010afcffffff5655f937f2efa99f77c0c401000000000a000000100083800a005c803fc82d8ff9670000"], 0x24}}, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c007d11b781afceb5b785f8ff538d1500001800ffff000b00000000000000fd0900743100"], 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d848d41f5540b9ac94280000000107030d0000000000000000020000061400078008000140ffffff"], 0x28}, 0x1, 0x0, 0x0, 0xa053}, 0x20880) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x405e, 0x7, 0x264}, 0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYRES16=r1, @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r1, @ANYRESHEX, @ANYRESHEX=r7, @ANYRES8=r6], 0x130}}, 0x28044010) recvmmsg(r9, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/205, 0xcd}], 0x3}, 0x7f}], 0x1, 0x10002, 0x0) (async, rerun: 32) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES32=r3, @ANYRES64=0x2710], 0x48}}, 0x4000001) (async, rerun: 32) mprotect(&(0x7f0000cce000/0x4000)=nil, 0x4000, 0x1) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r10, 0x8}}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (rerun: 64) 1m24.480488747s ago: executing program 3 (id=916): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000a027f"], 0x18) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40440c1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r3, 0x164, 0x0) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x944, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xfe, [], [{{0x9, 0x5, 0x12, 0x3, 0x8, 0x29, 0x6, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) 1m23.29016437s ago: executing program 3 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340100009e2a7e9e5148ee88da08a68ce2bb830ebebaacd5fe2d8e760b8acbaa03e76ea7134b0e2267cc3a935822", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3cff00000000a5e7d798d31cb035a51c1a9edc7fe229f466e44f11edb960210729addfdca2dff5e68b612d18d3419cd1ada52497c8cf7e877ac5aace6c3b2597addd0f8ffcf02e84263357611a7105499cf37b1026adfa6672b9e63e87524a640be17defe55d96a493e13789a1de4400d67b7d9b0300f6b3138f55df2dbca06eb3b9361e3a137f1dc2efb947de05c913ec09ee63c7bf557500ec142dbaf6046fb77edd533346ef291d581db652574229c6816a2850fa1f71b8f17eb70b5063d2148d25c56f306aa8ebd58b3b011e119074db", @ANYRES32=0x0, @ANYBLOB="29000000000400001c00128009000100626f6e64000000000c00028008001f0004000000"], 0x3c}}, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="c9c553d533b23ac43d141a541ba6efd364f40b96856ac87f697826c221fbf0360d9f083ab11b89860b2808b25e56d7eea292b1ada5c1aafb266a06b6f9656fa565ea3c77fe338c69f5d8f4c753d93c669f30b285f09f9103fb850244e4b926f23d099e219da956824f6e08c95de4dafc994d9922371822d27175a0e7e68006c9e65d78937182b1369b967af13959364de62cdebd3cfc4793c5a57ec0a888d6e496775e56cec11507e84b81d0f3430905274e74a8e86000c9581c1f94d4508d87b704f330e578e6f0048a", 0xca}, {&(0x7f0000002840)="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", 0xfd}, {&(0x7f0000000180)="0dd08cbe7c1a49bd6359976517889688c80505773265d21aa874e5af4f5b0800aa6e4225bb60bd1d249e35ef2921a841f48e45d141c764b92fede6e2e48ad049de7ce3b3df2b68072dbff2fa8474b482788a8e70aa982189199a036a74f0fb2d7525618959d7b7ea370f8ccc6e9af52ee009c13fe69d4297b1676207000000ca1cf597b2f78cd76cec9b9f22ddf4ce2d665bc38ce7820a0254d350672e884a16a40989d30622bb6e5721e0a63e1665131d50a757a8bdabb9725ce2518e1a01af405576f91ff0d8f1adf15a", 0xcb}], 0x4, &(0x7f00000000c0)}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) userfaultfd(0x80801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340100009e2a7e9e5148ee88da08a68ce2bb830ebebaacd5fe2d8e760b8acbaa03e76ea7134b0e2267cc3a935822", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3cff00000000a5e7d798d31cb035a51c1a9edc7fe229f466e44f11edb960210729addfdca2dff5e68b612d18d3419cd1ada52497c8cf7e877ac5aace6c3b2597addd0f8ffcf02e84263357611a7105499cf37b1026adfa6672b9e63e87524a640be17defe55d96a493e13789a1de4400d67b7d9b0300f6b3138f55df2dbca06eb3b9361e3a137f1dc2efb947de05c913ec09ee63c7bf557500ec142dbaf6046fb77edd533346ef291d581db652574229c6816a2850fa1f71b8f17eb70b5063d2148d25c56f306aa8ebd58b3b011e119074db", @ANYRES32=0x0, @ANYBLOB="29000000000400001c00128009000100626f6e64000000000c00028008001f0004000000"], 0x3c}}, 0x0) (async) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="c9c553d533b23ac43d141a541ba6efd364f40b96856ac87f697826c221fbf0360d9f083ab11b89860b2808b25e56d7eea292b1ada5c1aafb266a06b6f9656fa565ea3c77fe338c69f5d8f4c753d93c669f30b285f09f9103fb850244e4b926f23d099e219da956824f6e08c95de4dafc994d9922371822d27175a0e7e68006c9e65d78937182b1369b967af13959364de62cdebd3cfc4793c5a57ec0a888d6e496775e56cec11507e84b81d0f3430905274e74a8e86000c9581c1f94d4508d87b704f330e578e6f0048a", 0xca}, {&(0x7f0000002840)="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", 0xfd}, {&(0x7f0000000180)="0dd08cbe7c1a49bd6359976517889688c80505773265d21aa874e5af4f5b0800aa6e4225bb60bd1d249e35ef2921a841f48e45d141c764b92fede6e2e48ad049de7ce3b3df2b68072dbff2fa8474b482788a8e70aa982189199a036a74f0fb2d7525618959d7b7ea370f8ccc6e9af52ee009c13fe69d4297b1676207000000ca1cf597b2f78cd76cec9b9f22ddf4ce2d665bc38ce7820a0254d350672e884a16a40989d30622bb6e5721e0a63e1665131d50a757a8bdabb9725ce2518e1a01af405576f91ff0d8f1adf15a", 0xcb}], 0x4, &(0x7f00000000c0)}, 0x0) (async) 1m22.971023163s ago: executing program 3 (id=933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4bb}}], 0x30}}], 0x1, 0x800) shutdown(r0, 0x1) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) 1m22.910598579s ago: executing program 3 (id=935): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r1, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000640)={""/32, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}]}) socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r2 = syz_clone(0x40022000, &(0x7f0000000140)="a6007b764a43cf696c1f1d499c62f121868412c6c306ff7d76bb0a45288b17e729c9a506493385def89f2d60fe901a44407840fbce56ba821ee67da0d96adc30a76e9f04bd8bf1bf6a1a1c69b59df38ab27f56ebc3801960edee8faf844583917de6d2df799074a0d7bc83831c9a76d61328059d0949c71112e44bd6e2170971668abe66d3b78cc3032f934af33f58bed86c973fbbf764466768aaa52716836b7d38001a79", 0xa5, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)="f0fda138556525354613108ca4a58ee133e8e4baa67e0de31f09563ae75375120640e239183cb8766a643b186035b61459b10edb20") r3 = syz_open_procfs(r2, &(0x7f0000000080)='comm\x00') ioctl$UBLK_U_CMD_GET_FEATURES(r3, 0x80207513, &(0x7f0000000040)={0x0, 0xffff, 0x8}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m21.658275736s ago: executing program 3 (id=949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r1, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xff, 0x7, 0x17}]}, 0x10) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.11133674s ago: executing program 3 (id=955): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000180), 0xfffffffffffffffc, 0x2000) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x7) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000f72000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = syz_open_dev$swradio(0x0, 0x0, 0x2) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) preadv(r7, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r10 = socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x5, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) writev(r6, 0x0, 0x0) 1m21.048889945s ago: executing program 33 (id=955): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000180), 0xfffffffffffffffc, 0x2000) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x7) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000f72000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = syz_open_dev$swradio(0x0, 0x0, 0x2) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) preadv(r7, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r10 = socket$packet(0x11, 0x3, 0x300) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x5, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) writev(r6, 0x0, 0x0) 1m11.896619827s ago: executing program 5 (id=1039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r3 = socket$inet6(0xa, 0x1, 0x100) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) setreuid(0xee00, 0xee00) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x18, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) 1m11.896347806s ago: executing program 5 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x6, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c880}, 0x9840) 1m11.820930695s ago: executing program 5 (id=1041): openat$sysfs(0xffffffffffffff9c, 0x0, 0x40082, 0x100) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x41a100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x100, 0x8) chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000080)='./file1\x00', 0x104) close_range(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f00000000c0)='./file0/file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000f2, 0x0, 0x400006}]}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 1m11.621141453s ago: executing program 5 (id=1042): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000240)="040cbca69ad4e1", 0x7, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$alg(0x26, 0x5, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x1, 0x0) 1m11.620733336s ago: executing program 5 (id=1043): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$P9_RREADDIR(r2, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000001c0)="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") 1m11.52133702s ago: executing program 5 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) (rerun: 64) write(r6, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b', 0x29) (async) r7 = syz_io_uring_setup(0xb, &(0x7f0000000540)={0x0, 0x80, 0x1000, 0x0, 0xfffffffe, 0x0, r6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x2, 0x0, 0x0, 0x0, &(0x7f0000002180)=[{0xfffffffffffffffe, 0x0, 0x82}], 0x1, 0x0, 0x1}) (async) io_uring_enter(r7, 0x6, 0x0, 0x0, 0x0, 0x0) (async) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) (async) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="04010000100000010000000000000000ff02000000000000000000000000000164010100000000000000000000000000ffff000000000000000000203d000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc00000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000002000000feffffffffffffff0000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a00024070000000005b751a4a4ecc11bd085a135cce8f00000014000e00fc010000000000000000000000000001b4771152582cd6ec26b64024915cd19565b99dfa551c3712216cad264c6cf5625942f4170e1ef5c2389fd1c680c1e94ce57b32734edb9dd3e78b438c2b0114134061c420f06c11cc824c467ccf0e4cc2444c5582ccf4f7f30bf064a666fd68afd2c43e40979a0116d13af2cecdece4b170caa88b0a19c9a7140c189e47241be7def753eee81d192ddaa6610bbf47df3c2e702b028265a83fd868b40631f200"], 0x104}}, 0x40) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010058, 0x0, 0x6}]}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 56.415928388s ago: executing program 34 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) (rerun: 64) write(r6, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b', 0x29) (async) r7 = syz_io_uring_setup(0xb, &(0x7f0000000540)={0x0, 0x80, 0x1000, 0x0, 0xfffffffe, 0x0, r6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x2, 0x0, 0x0, 0x0, &(0x7f0000002180)=[{0xfffffffffffffffe, 0x0, 0x82}], 0x1, 0x0, 0x1}) (async) io_uring_enter(r7, 0x6, 0x0, 0x0, 0x0, 0x0) (async) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) (async) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="04010000100000010000000000000000ff02000000000000000000000000000164010100000000000000000000000000ffff000000000000000000203d000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x40) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010058, 0x0, 0x6}]}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.845991981s ago: executing program 6 (id=1490): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = creat(&(0x7f0000001800)='./file0\x00', 0x83b24041df3a533f) lseek(r1, 0xffffffffffffff7f, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000001e00)=[{&(0x7f00000001c0)=""/255, 0xff}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x4, &(0x7f0000001f40)=[{&(0x7f0000001e40)=""/248, 0xf8}], 0x1, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x37, '\x00', @data=0x4, 0xbd}]}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x2e0, 0x210, 0x2e0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xba7d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x2, 0x1, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x1, 0x0, 0x6, 0x2, 0x7, 0x1], 0x0, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1c, "f30053790051bf3ffd3f72b279e4368029840d3facd44179be46d350310b"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioctl(r0, 0x0, &(0x7f0000000000)="d6d072062eaf68041aa065bfbcdf4b92746f12781c89fb915a10d99a0851e4b2a2baef2a512d9cf01adef0973aa368ed0949db14ed6f") 2.816814095s ago: executing program 6 (id=1494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x725641, 0x0) read$FUSE(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) (async, rerun: 64) r2 = dup(r0) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {0x1d}, &(0x7f0000000240)=""/118, 0x76, 0x0, 0x0}, 0x58) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0x8dd}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) fcntl$dupfd(r2, 0x406, r4) r5 = epoll_create(0x6) (async) r6 = epoll_create1(0x0) (async) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x201c}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000140)={0x60000000}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f00000001c0)={0x1008}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0xa000001c}) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) (async) close(r3) close(0x3) 2.700696727s ago: executing program 6 (id=1496): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/platform/drivers_probe\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xc9a3, 0x30, 0x10, 0x9}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000480)={0x21e, 0x9, 0x0, 0x8, r4}, &(0x7f0000000540)=0x10) open_tree(r1, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x80000) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002bfe0103"], 0xa0}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r7, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12121, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') write$cgroup_int(r8, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'8255\x00', [0x140, 0x0, 0xd, 0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x2c731, 0x4000004, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x103, 0x80000006, 0x6, 0x0, 0x7, 0x2, 0x2f, 0x81, 0xffd, 0x6, 0xab, 0x1, 0x283, 0x8001, 0x400006]}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r13, &(0x7f00000001c0)='pcspkr', 0x6) ioctl$FBIOPUT_VSCREENINFO(r13, 0x4601, &(0x7f0000000180)={0x1000, 0x2000, 0x60, 0x740, 0x1, 0x3ab5e48a, 0x20, 0x2, {0x81, 0x400}, {0x5, 0xfffffffb, 0x1}, {0x3, 0x0, 0x1}, {0x1c63, 0xffe1}, 0x3, 0x0, 0x4, 0x100, 0x0, 0x5, 0xa36, 0xc35d, 0x7, 0x8f00, 0xc, 0x9, 0x1, 0x1, 0x3, 0xd}) ioctl$EXT4_IOC_MIGRATE(r12, 0xff07) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008"], 0x48}}, 0x20000034) 2.694360245s ago: executing program 4 (id=1498): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$tmpfs(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140), 0x2004001, &(0x7f0000000240)=ANY=[@ANYBLOB='mpol=locaL=4,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705fc42a31ee8dd5759026643d000000949ca89612c2ce232d299fbfdea65bc903ebb8b1139c63f3a4cb6cecea899bcb23d9255e83801056078324065575f2973218b37f6287da5aa042fb9217a9258f6c6fb5c85180b6f14c795184798e34", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x2, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0046686, &(0x7f0000000000)={0x7, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0, 0x0, r3}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f0000000040)={&(0x7f0000000080)=[r6, r6], &(0x7f0000000200)=[0x1000000000003fd], 0x7fff, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000280)={0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x82702) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000140)={0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r13 = dup3(r12, r11, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r14, &(0x7f0000005180)={0x2020}, 0x2020) r15 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r15, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, &(0x7f0000000100)={r10, r16, 0x7, 0x7, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000380)={&(0x7f0000000340)=[r4, r6, r7, r8, r16, 0x0], 0x3, 0x6, 0x1}) 2.570825885s ago: executing program 4 (id=1499): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x20000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0xa169, 0x2, &(0x7f0000000240)="dc511fe778267a8c4f675e0fe08c54d4beaf897b6b37cf42cd270c3f961f99f35083dcad0fe2df6bfc30175127c7ea8623d4639008e67144935d0ff80abbb830653a6bfb0d8ed19cb3656d5e01bc6522037174aed1cae0", 0x57, 0x10001, 0x70c, 0x0, 0x3, 0x0, &(0x7f00000002c0)="5b29179cc85b6ea437ffda5618b20579d0ff43f0f06cee4ecbfa468f90a0e290f64936794f84290fe0803a793922f3413a08a66ff8723d6090bc1d81e6f459c29a72f183f66092fcc6bb0dfc181fcc4eb88c9d0f122ab3dfacbe74241e520c7089e5a375217da37c7c2f30a8d5c1cc3e586ac64d33f009254d5bcbecc10ddf8a44628699f7fc6b5a226b88e425ff6a71f196fb4905484ea1d17e853cc57b9cec7d6f458823db60592e013fc9b55cf1530307a4989680df9ccef261309c"}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43"], 0x88) 2.569907597s ago: executing program 6 (id=1500): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x20000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0xa169, 0x2, &(0x7f0000000240)="dc511fe778267a8c4f675e0fe08c54d4beaf897b6b37cf42cd270c3f961f99f35083dcad0fe2df6bfc30175127c7ea8623d4639008e67144935d0ff80abbb830653a6bfb0d8ed19cb3656d5e01bc6522037174aed1cae0", 0x57, 0x10001, 0x70c, 0x0, 0x3, 0x0, &(0x7f00000002c0)="5b29179cc85b6ea437ffda5618b20579d0ff43f0f06cee4ecbfa468f90a0e290f64936794f84290fe0803a793922f3413a08a66ff8723d6090bc1d81e6f459c29a72f183f66092fcc6bb0dfc181fcc4eb88c9d0f122ab3dfacbe74241e520c7089e5a375217da37c7c2f30a8d5c1cc3e586ac64d33f009254d5bcbecc10ddf8a44628699f7fc6b5a226b88e425ff6a71f196fb4905484ea1d17e853cc57b9cec7d6f458823db60592e013fc9b55cf1530307a4989680df9ccef261309c"}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43"], 0x88) 2.058251963s ago: executing program 1 (id=1510): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x8240, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22ffe6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) preadv2(r3, &(0x7f0000001740)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1, 0xfffffffa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000040)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/58, 0x3a}}], 0x1, 0x60010042, 0x0) 1.834434172s ago: executing program 1 (id=1511): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x44040, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x183240, 0x0) ioctl$CDROM_LOCKDOOR(r1, 0x5329, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) r2 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0xb) 1.747667712s ago: executing program 1 (id=1512): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', @random="1805aa000020"}) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) r1 = socket(0xa, 0x3, 0xff) r2 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0xabc21000) (async) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x14) (async) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x1af, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x20c}}, 0x0) (async) r8 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0xbd) (async) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x2c6, 0x6, 0x39c}, &(0x7f0000000140)=0x14) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x8000, 0x2, 0x75e, r9}, 0x10) (async) setns(0xc9, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r11, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}}, 0x8000) (async) get_mempolicy(0x0, 0x0, 0x205, &(0x7f0000505000/0x4000)=nil, 0x3) 1.690671671s ago: executing program 1 (id=1513): r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000000)='$\x00', 0x0, &(0x7f0000000040)={@align=0x10, {0x7, 0x7, 0xa69d, 0xa}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x7066ef23}, {[0x4, 0x17600000, 0x1, 0x2]}, 0x4, 0x58, &(0x7f00000001c0)=""/88}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x2c, @void}, 0x10) 1.68948532s ago: executing program 1 (id=1515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0xfffffffc, 0x100004, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x100004, 0x4, 0x4, 0x2000, 0x100, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {r5, r7}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x3136564e, 0x8}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r10, &(0x7f00000001c0)='\x00', 0x80680, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x10001]}, {0x4, 0x1, 0x2, 0x2}}, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x5}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x9, 0x70bd2a, 0x25dfdbbe, {0x0, 0x0, 0x0, r8, 0x4706, 0x37eba}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) 1.620607528s ago: executing program 1 (id=1516): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x5, 0x36, "828223dd49d823f1d78dda7b67fe67643e6e6fe1a097e59c6671e839e3e88167fa27fb04b672f09dcaddddf470cb2e9a596bfe6a797c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) rt_sigqueueinfo(0x0, 0x30, &(0x7f0000000240)={0x20, 0x6}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xa}, {0xfff3, 0x9}, {0xffff, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xf, 0x7, 0x1, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048054}, 0xc014) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r8, 0x5}}, 0x10) 1.540574696s ago: executing program 2 (id=1517): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r3], 0x22) r4 = socket(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8040, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400), 0x0, 0x48, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="0d000000070000000000b7cdf4c80a9c2c6d55c3", @ANYRES32, @ANYRESOCT=r2], &(0x7f00000009c0)='syzkaller\x00', 0xfffffffe, 0xa7, &(0x7f0000000a00)=""/167, 0x41000, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x10, 0x400, 0x8}, 0x10, 0x186a0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000b40)=[{0x3, 0x5, 0x6, 0x9}, {0x2, 0x4, 0xb, 0x3}, {0x2, 0x5, 0x6, 0x9}], 0x10, 0x10000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000300000000000000a39b0000"], &(0x7f0000000400)='syzkaller\x00', 0x1000080, 0x32, &(0x7f0000000240)=""/50, 0x41100, 0x2, '\x00', r7, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x2, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xfffffffc, 0x4}, 0x10, r10, r11, 0x4, &(0x7f0000000c40)=[r5, r6, r5, r5, r5, r6, r5], &(0x7f0000000c80)=[{0x0, 0x5, 0x9}, {0x5, 0x4, 0xb, 0x9}, {0x2, 0x3, 0x2, 0xb}, {0x1, 0x2, 0xe}], 0x10, 0x8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5, 0xffffffffffffffff}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xa, 0x200000000000019a, &(0x7f0000000f00)=ANY=[@ANYRES16=r13, @ANYRES32=r13, @ANYRESHEX=r8, @ANYRES16=r12, @ANYRES8=r9], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x49, 0x100, 0xffffffff, 0x401, 0x0, 0x1, 0x0, 0x0, 0xd, 0xff, 0x0, 0x8000001f, 0x2, 0x47}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r14, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x129, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x400, 0x114bea3aeb2bf1c0) ioctl$sock_inet_SIOCSARP(r16, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @empty}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1c, {0x2, 0x4e22, @empty}, 'syzkaller0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.53937841s ago: executing program 2 (id=1518): ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x3, 0x2, 0x1, "635f00b696ebb905e3eaf7f878d862b3d7ebb8bd49b36ae0920f3f437acf51b6", 0x47504a4d}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x1, 0x3, 0x6, 0x2, 0x5, 0xdd}, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000280)="ff80", 0x2) sendto$inet(r2, &(0x7f0000000000)="d401cedf82cad57bb39fa4bf06a495fb95c83e5967ad53a3284703f428efc1163fe4a00e2e43f4b4b2bd74", 0x2b, 0x40c1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000002c0)="1cd0e63c1a131581a8c933ba458feab8f1d564d948efb08ebab48363e2a3bf94f2016c2439111490321512116126cfb5a15bfffdacbe05a98b943b0d72d2004a0ccbc330c4a25d9c91b1954e173b7f47f4db9b54bf5376d6cf0b7a875ef1514c1bf57b8e2d8180bf1a2926ee6ea0468c35de7ebb0dac7f0e98150a5317abfbb437a5420f4a58c8effdbda069000fd945703d8b9f1a0cc683ed90cc16c502bd8b7304bac1a114e7eee76f6a46e02130049a4b8106a09d63e533fab8f4833351da80ec4987d5f2fc02c62dc5d709edd1f4", 0xd0}, 0x68) r4 = socket$kcm(0x29, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f00000004c0)="66baf80cb8c0fe1886ef66bafc0c66b89f0066ef0fc76800c4c1f973f800c4e1d659bcfa4f191ad0c4e17d28251c8fffff6e3e0f30c4e2a906d8c4c2d13ed33e0f0f57000d", 0x45}], 0x1, 0x24, &(0x7f0000000580), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@gid={'gid', 0x3d, 0xee01}}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) lseek(r6, 0x10001, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) write(r5, &(0x7f0000000300)='auto', 0x4) sendmmsg$inet(r4, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="0100b402ed", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.260932748s ago: executing program 6 (id=1519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="a9040500cf0800001c0012800b00010069703667726500000c00028008000400010001000800040000000000"], 0x44}}, 0x0) 1.178351058s ago: executing program 4 (id=1520): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000440)={{0x3, 0x4, 0xcb, 0x8, '\x00', 0x6}, 0x0, [0x2, 0x41d, 0x8, 0x9, 0x2701, 0x1, 0x8000000000000001, 0x81, 0x4, 0x0, 0x1, 0x4, 0x40, 0xb, 0x7fffffffffffffff, 0x97c4, 0x1ff, 0x9, 0x4, 0x8, 0x50, 0x7, 0x7a, 0x7fffffff, 0x99e, 0x8, 0x0, 0x10001, 0x8001, 0x9000, 0x5, 0x10001, 0x7, 0x3, 0x0, 0x1, 0xb4, 0x480, 0xf3, 0x1, 0xfffffffffffffffb, 0x8, 0x8001, 0x6, 0x6, 0x3, 0x10, 0x3, 0x8, 0x8, 0x57, 0x10, 0x5, 0x6, 0xfffffffffffffff9, 0x200, 0x1ff, 0x3, 0x55, 0x7, 0x5, 0x5, 0x33c7, 0x5, 0x80000001, 0x8000, 0x5, 0x74, 0x0, 0x3, 0x59f9, 0xcc, 0xc, 0x2, 0x3, 0x4, 0x1, 0xb433, 0xd, 0xe753, 0x10001, 0x0, 0xbd, 0x1, 0x3, 0x1, 0x8, 0x7, 0x5, 0x1, 0x40, 0x46, 0x2, 0x6, 0x200000000000, 0x4, 0x8, 0x9, 0x1, 0xfe7, 0x2, 0x25, 0x80, 0x7fffffff, 0xfd51, 0x2, 0x7fffffff, 0x6, 0x3, 0x7, 0x401, 0x980, 0x9, 0x75, 0x871, 0x2, 0xffffffffffffffff, 0x9, 0x7fff, 0x6, 0x0, 0x9, 0x9a6, 0x8000000000000000, 0x6, 0x10, 0x5b, 0x10]}) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.119504891s ago: executing program 6 (id=1521): syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600060001"], 0x7c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x9) epoll_create(0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee50150305870ca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x24048800) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x2, {0x2, 0x0, 0x2}}, 0x18) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x8002, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0xf4, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe64, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) write$9p(r9, &(0x7f0000000280)="19851518494878d1f6a6a6e50c749f15563da2b37b77791756ad352dcef40df55d9e266aa63a", 0x26) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0x1, 0xb, "0512816f8730ed971148a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, 0x0, 0x0}) r11 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000007c0)="fd5d", 0x2}], 0x1}, 0x808) sendmsg$kcm(r11, &(0x7f0000005c00)={0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000043c0)="651901", 0x3}], 0x1}, 0x90) socket$netlink(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02070b0004000000080000000197c9bbf25e890294d9bfe8c01d0cfee0634c9ff4f6d4f20ebbd7bdf42671a943e3178165b636acd6082461849f513885b9ab4b7864e3a2ed838c47b7d53464ad2bec5ef46b6332c4"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r12}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 647.998118ms ago: executing program 4 (id=1522): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 646.131169ms ago: executing program 2 (id=1523): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x80000000, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 645.814204ms ago: executing program 4 (id=1524): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x140d, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400005c}, 0x4000080) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x44, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0xa8, [@multicast2, @local, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x4000, {[@timestamp={0x8, 0xa, 0x0, 0x2e1}]}}}}}}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x0, 0x12}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x48, 0x0, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x0, 0x0, {0x86}}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r6, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, r7}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="0629000000000000009f04c73413b3a53dce377da8e9bcf81db64a7b99711fab9589e613fdb4f5e3165a5c716e56377f7a5b1d17d1f87436626bdd2fa665caacaacb7a25fa0b50e29ea34c028e27faa811fbe249749de488347e2da37f509d37bb2ccb44cf8cda9b47f632d259893cb448bc565fe6fd435e8eadabbb0fea98d3b23583481c40ac094bbbea978f662ada4d23723ceb83319e5b80cbe50d076f7930504f4e2b4c1f9eb901040000000010a5267e380c287dcd14e8b1966fe31272c529fd0a37d0b080eab5a29f4ea66549cfdb7af6502c121b3294815997243f66264e09b2a76c3358b4cc878f6365c586b741c522baa2eb13f8d5e6a62c205b8a611af82bf186958b37185b3863e0a95380dfb04b1aa81a9b9f4c3af649052ae10be62cee2f4ead9d37229418853fc6e8c81fda057906a5807bfa7400c83ce57e97c2156dbdc17a009f8bdecf6600"/344], 0x158) 589.786019ms ago: executing program 2 (id=1525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x20004084) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'security\x00', 0x0, [0x3, 0x3, 0x1, 0x1, 0x2c]}, &(0x7f0000000200)=0x54) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x10c8, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x10b4, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10001, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x1060, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0x4f, 0x4, 0x5}, {0x4, 0x5, 0x10, 0x1}, {0x1, 0x0, 0x2, 0x5}, {0x1000, 0xc, 0x6, 0x28}, {0x1, 0x3, 0x4b, 0x7}, {0x3, 0xde, 0x6, 0xf}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r3 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) ioctl$XFS_IOC_ERROR_INJECTION(r4, 0x40085874, &(0x7f0000000000)={r3, 0x9}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) syz_io_uring_setup(0x258, &(0x7f0000000240)={0x0, 0x1846, 0x400, 0x2, 0x1cb}, &(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r6 = mmap$IORING_OFF_CQ_RING(0x0, 0x1, 0x1000000, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x51a7, &(0x7f0000000400)={0x0, 0x3f0b, 0x80, 0x1, 0xb0}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_READ_MULTISHOT={0x31, 0x16, 0x2004, @fd=r4, 0x2, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x81, '\x00', &(0x7f00000005c0)={0x55, 0x1, 0x4e, &(0x7f0000000540)="7f51ce2d8354b0068069b5248b8485105008eef1ae04bd5ee5352e3892efad763bda992d95c851685b04e0a0a1b7421a62b7d4e99f2a1928ced8bafb3a6a93a539d7d0c5a6ef3388ad75403fdb8d", 0x42f6}, 0x324c}}) 573.475044ms ago: executing program 2 (id=1526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0xffff1000, 0x0, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee3", 0xe1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985793802", 0x18}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff93", 0x55}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x8a881, 0x20) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000008000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="0fc75ef566b9800000c00f326635004000000f30f0839606007166d9e0f20f30660f388193ac00baf80c66b89c6f428266efbafc0cedbaf80c66b84c6a9e8466efbafc0c66ed0f01bb000066b9b109000066b82ac205f066bab6d7fb5c0f30", 0x5f}], 0x1, 0x3d, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 572.744445ms ago: executing program 4 (id=1527): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x20000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0xa169, 0x2, &(0x7f0000000240)="dc511fe778267a8c4f675e0fe08c54d4beaf897b6b37cf42cd270c3f961f99f35083dcad0fe2df6bfc30175127c7ea8623d4639008e67144935d0ff80abbb830653a6bfb0d8ed19cb3656d5e01bc6522037174aed1cae0", 0x57, 0x10001, 0x70c, 0x0, 0x3, 0x0, &(0x7f00000002c0)="5b29179cc85b6ea437ffda5618b20579d0ff43f0f06cee4ecbfa468f90a0e290f64936794f84290fe0803a793922f3413a08a66ff8723d6090bc1d81e6f459c29a72f183f66092fcc6bb0dfc181fcc4eb88c9d0f122ab3dfacbe74241e520c7089e5a375217da37c7c2f30a8d5c1cc3e586ac64d33f009254d5bcbecc10ddf8a44628699f7fc6b5a226b88e425ff6a71f196fb4905484ea1d17e853cc57b9cec7d6f458823db60592e013fc9b55cf1530307a4989680df9ccef261309c"}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43"], 0x88) 0s ago: executing program 2 (id=1528): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) 0s ago: executing program 2 (id=1529): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000040000fedbdf25120000020800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) kernel console output (not intermixed with test programs): cd.2: release socket [ 150.363723][ T5826] vhci_hcd vhci_hcd.2: disconnect device [ 150.846505][ T5725] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 151.085235][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 151.233372][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 151.237098][ T29] usb 9-1: New USB device found, idVendor=0bb4, idProduct=0a80, bcdDevice=57.6d [ 151.241788][ T29] usb 9-1: config 4 has an invalid interface number: 206 but max is 1 [ 151.245725][ T29] usb 9-1: config 4 has an invalid interface number: 174 but max is 1 [ 151.249006][ T29] usb 9-1: config 4 has no interface number 0 [ 151.251443][ T29] usb 9-1: config 4 has no interface number 1 [ 151.254168][ T29] usb 9-1: config 4 interface 206 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 151.258416][ T29] usb 9-1: config 4 interface 206 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 151.262475][ T29] usb 9-1: config 4 interface 206 altsetting 8 has an endpoint descriptor with address 0x92, changing to 0x82 [ 151.267133][ T29] usb 9-1: config 4 interface 206 altsetting 8 endpoint 0x82 has invalid maxpacket 17881, setting to 1024 [ 151.271535][ T29] usb 9-1: config 4 interface 206 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 151.275797][ T29] usb 9-1: config 4 interface 206 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 151.279865][ T29] usb 9-1: config 4 interface 206 altsetting 8 endpoint 0xC has invalid maxpacket 1040, setting to 64 [ 151.284322][ T29] usb 9-1: config 4 interface 206 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 151.288472][ T29] usb 9-1: config 4 interface 206 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 1024 [ 151.292243][ T29] usb 9-1: config 4 interface 206 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 151.296683][ T29] usb 9-1: config 4 interface 206 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 151.300748][ T29] usb 9-1: config 4 interface 206 altsetting 8 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 151.305939][ T29] usb 9-1: config 4 interface 206 has no altsetting 0 [ 151.308668][ T29] usb 9-1: config 4 interface 174 has no altsetting 0 [ 151.313901][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.317429][ T29] usb 9-1: Product: syz [ 151.319202][ T29] usb 9-1: Manufacturer: syz [ 151.321136][ T29] usb 9-1: SerialNumber: syz [ 151.329514][ T9532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.333497][ T9532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.398090][ T42] audit: type=1400 audit(1786681683.364:31606): avc: denied { connect } for pid=9541 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.405598][ T42] audit: type=1400 audit(1786681683.374:31607): avc: denied { getopt } for pid=9541 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.543391][ T5725] Bluetooth: hci1: command tx timeout [ 151.638531][ T9557] 9pnet_virtio: no channels available for device syz [ 151.646407][ T9557] program syz.5.986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.669605][ T42] audit: type=1400 audit(1786681683.634:31608): avc: denied { ioctl } for pid=9558 comm="syz.1.987" path="socket:[32238]" dev="sockfs" ino=32238 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.256457][ T9571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9571 comm=syz.1.992 [ 152.269829][ T9571] tmpfs: Unknown parameter 'gruota_bl\c@pX l(k_hardlimit' [ 152.346290][ T5725] Bluetooth: hci3: command 0x0405 tx timeout [ 152.385154][ T9574] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.393900][ T9574] block device autoloading is deprecated and will be removed. [ 152.423494][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 152.437657][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'. [ 152.443006][ T9577] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 152.539288][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 152.578996][ T9579] bridge3: entered promiscuous mode [ 152.582125][ T9579] bridge3: entered allmulticast mode [ 152.786079][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 152.856649][ T9591] program syz.5.996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.890147][ T9592] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 152.890147][ T9592] [ 152.920652][ T9598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.957083][ T9601] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 152.958843][ T9601] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 153.238818][ T42] audit: type=1400 audit(1786681685.204:31609): avc: denied { write } for pid=9630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.304576][ T42] audit: type=1400 audit(1786681685.264:31610): avc: denied { write } for pid=9638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.374991][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1007'. [ 153.392532][ T42] audit: type=1400 audit(1786681685.354:31611): avc: denied { write } for pid=9646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.623572][ T5725] Bluetooth: hci1: command tx timeout [ 153.864386][ T29] ipaq 9-1:4.206: PocketPC PDA converter detected [ 153.873510][ T29] usb 9-1: active config #4 != 1 ?? [ 153.887365][ T29] usb 9-1: USB disconnect, device number 2 [ 154.021760][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 154.423711][ T5725] Bluetooth: hci3: command 0x0405 tx timeout [ 154.504443][ T9732] xt_hashlimit: size too large, truncated to 1048576 [ 154.556765][ T9736] x9: renamed from bridge_slave_0 [ 155.058592][ T9749] sg_read: process 72 (syz.4.1026) changed security contexts after opening file descriptor, this is not allowed. [ 155.071238][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 155.071269][ T42] audit: type=1400 audit(1786681687.034:31621): avc: denied { watch watch_reads } for pid=9750 comm="syz.1.1027" path="pipe:[34943]" dev="pipefs" ino=34943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 155.119240][ T42] audit: type=1400 audit(1786681687.084:31622): avc: denied { create } for pid=9752 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.129673][ T42] audit: type=1400 audit(1786681687.094:31623): avc: denied { write } for pid=9752 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.138085][ T5725] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 155.142816][ T5725] Bluetooth: hci0: unexpected event for opcode 0x200b [ 155.146860][ T42] audit: type=1400 audit(1786681687.094:31624): avc: denied { create } for pid=9750 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.155311][ T42] audit: type=1400 audit(1786681687.094:31625): avc: denied { write } for pid=9750 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.163739][ T42] audit: type=1400 audit(1786681687.094:31626): avc: denied { read } for pid=9750 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.172041][ T42] audit: type=1400 audit(1786681687.094:31627): avc: denied { ioctl } for pid=9750 comm="syz.1.1027" path="socket:[34268]" dev="sockfs" ino=34268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.182488][ T42] audit: type=1400 audit(1786681687.104:31628): avc: denied { create } for pid=9750 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.190809][ T42] audit: type=1400 audit(1786681687.104:31629): avc: denied { write } for pid=9750 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.199701][ T42] audit: type=1400 audit(1786681687.104:31630): avc: denied { write } for pid=9750 comm="syz.1.1027" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 155.376308][ T9765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 155.381243][ T9765] UDF-fs: Scanning with blocksize 512 failed [ 155.387758][ T9765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 155.390820][ T9765] UDF-fs: Scanning with blocksize 1024 failed [ 155.394837][ T9765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 155.398015][ T9765] UDF-fs: Scanning with blocksize 2048 failed [ 155.400925][ T9765] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 155.404488][ T9765] UDF-fs: Scanning with blocksize 4096 failed [ 155.491727][ T9772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 155.713712][ T5725] Bluetooth: hci1: command tx timeout [ 156.437099][ T9802] veth0: entered promiscuous mode [ 156.474074][ T9804] 9pnet_virtio: no channels available for device syz [ 156.504227][ T9804] overlayfs: failed lookup in lower (newroot/15, name='file0', err=-40): overlapping layers [ 156.508842][ T9804] overlayfs: failed lookup in lower (newroot/15, name='file0', err=-40): overlapping layers [ 158.697521][ T9783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.758081][ T9812] usb usb8: usbfs: process 9812 (syz.4.1045) did not claim interface 0 before use [ 158.771172][ T9812] jffs2: notice: (9812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 158.793199][ T9812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 158.795900][ T9812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 158.799989][ T9812] vhci_hcd vhci_hcd.0: Device attached [ 158.857339][ T9819] vhci_hcd: connection closed [ 158.863169][ T5817] vhci_hcd vhci_hcd.4: stop threads [ 158.869059][ T5817] vhci_hcd vhci_hcd.4: release socket [ 158.871448][ T5817] vhci_hcd vhci_hcd.4: disconnect device [ 159.195804][ T1350] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 159.344118][ T1350] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 159.347693][ T1350] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 159.351080][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.354749][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.358011][ T1350] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 159.363743][ T1350] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 159.366864][ T1350] usb 6-1: Manufacturer: syz [ 159.370694][ T1350] usb 6-1: config 0 descriptor?? [ 159.609647][ T9839] __nla_validate_parse: 1 callbacks suppressed [ 159.609661][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1049'. [ 159.691437][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1049'. [ 159.695194][ T9839] nbd: device at index 64 is going down [ 159.758552][ T9844] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1050'. [ 159.781677][ T1350] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 159.794350][ T1350] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 159.795855][ T6631] udevd[6631]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 160.089146][ T42] kauditd_printk_skb: 107 callbacks suppressed [ 160.089228][ T42] audit: type=1400 audit(1786681692.054:31738): avc: denied { create } for pid=9827 comm="syz.1.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.100042][ T42] audit: type=1400 audit(1786681692.054:31739): avc: denied { bind } for pid=9827 comm="syz.1.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.107517][ T42] audit: type=1400 audit(1786681692.054:31740): avc: denied { listen } for pid=9827 comm="syz.1.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.129793][ T42] audit: type=1400 audit(1786681692.094:31741): avc: denied { bind } for pid=9852 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.137029][ T42] audit: type=1400 audit(1786681692.094:31742): avc: denied { accept } for pid=9852 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.147232][ T42] audit: type=1400 audit(1786681692.094:31743): avc: denied { write } for pid=9852 comm="syz.4.1052" path="socket:[33565]" dev="sockfs" ino=33565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.031332][ T42] audit: type=1400 audit(1786681692.994:31744): avc: denied { write } for pid=9858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.052340][ T42] audit: type=1400 audit(1786681693.014:31745): avc: denied { read } for pid=9861 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.085801][ T42] audit: type=1400 audit(1786681693.054:31746): avc: denied { write } for pid=9863 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.107815][ T9866] xt_hashlimit: size too large, truncated to 1048576 [ 161.110450][ T42] audit: type=1400 audit(1786681693.074:31747): avc: denied { setopt } for pid=9865 comm="syz.4.1055" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.212739][ T9870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1055'. [ 161.648619][ T9894] netlink: 'syz.1.1059': attribute type 21 has an invalid length. [ 161.789535][ T5818] usb 6-1: USB disconnect, device number 13 [ 162.521822][ T9901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39952 sclass=netlink_route_socket pid=9901 comm=syz.4.1061 [ 162.535438][ T9907] openvswitch: netlink: Missing key (keys=40, expected=100) [ 162.691263][ T9916] sctp: [Deprecated]: syz.4.1067 (pid 9916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.691263][ T9916] Use struct sctp_sack_info instead [ 162.865326][ T9926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1071'. [ 163.230525][ T9943] new mount options do not match the existing superblock, will be ignored [ 163.242585][ T9943] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 163.333111][ T9947] xt_cluster: node mask cannot exceed total number of nodes [ 163.475543][ T9952] netlink: 'syz.4.1081': attribute type 32 has an invalid length. [ 163.492774][ T9955] support for the xor transformation has been removed. [ 163.496155][ T9952] bond1: Setting coupled_control to off (0) [ 163.498491][ T9955] 9pnet_virtio: no channels available for device syz [ 163.498665][ T9952] bond1: entered promiscuous mode [ 163.516242][ T9952] tipc: Failed to remove unknown binding: 66,0,0/0:1732602694/1732602695 [ 163.522459][ T9952] tipc: Failed to remove unknown binding: 66,0,0/0:1732602694/1732602695 [ 163.649237][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 163.878636][ T9990] pimreg: tun_chr_ioctl cmd 1074025672 [ 163.880434][ T9990] pimreg: ignored: set checksum enabled [ 163.928637][ T5439] veth0_vlan: left promiscuous mode [ 163.945670][ T9121] veth0_vlan: entered promiscuous mode [ 164.028321][T10001] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1094'. [ 164.091127][T10010] xt_HMARK: spi-set and port-set can't be combined [ 164.138998][T10013] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 164.164588][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 164.288543][T10023] gfs2: error -5 reading superblock [ 164.566127][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 164.585742][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 164.625976][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1106'. [ 164.677602][T10051] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 164.848558][T10058] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 164.860512][T10058] overlayfs: conflicting lowerdir path [ 166.822473][ T9984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.930224][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 166.930251][ T42] audit: type=1400 audit(1786681698.894:31842): avc: denied { write } for pid=10071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.021839][ T42] audit: type=1400 audit(1786681698.984:31843): avc: denied { write } for pid=10084 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.086832][T10095] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 167.088412][ T42] audit: type=1400 audit(1786681699.044:31844): avc: denied { mount } for pid=10091 comm="syz.2.1116" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.110671][ T42] audit: type=1400 audit(1786681699.084:31845): avc: denied { setattr } for pid=10091 comm="syz.2.1116" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 167.139123][ T42] audit: type=1400 audit(1786681699.104:31846): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.233209][T10102] geneve1: entered allmulticast mode [ 167.248350][ T42] audit: type=1400 audit(1786681699.214:31847): avc: denied { load_policy } for pid=10101 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.258008][T10102] SELinux: invalid class [ 167.265005][T10102] SELinux: failed to load policy [ 167.384149][ T5877] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 167.496792][ T42] audit: type=1400 audit(1786681699.464:31848): avc: denied { name_connect } for pid=10106 comm="syz.2.1121" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 167.543773][ T5877] usb 9-1: Using ep0 maxpacket: 32 [ 167.549555][ T5877] usb 9-1: unable to get BOS descriptor or descriptor too short [ 167.552818][ T5877] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 167.560533][ T5877] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 167.564446][ T5877] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 167.568171][ T5877] usb 9-1: config 14 has no interface number 0 [ 167.570955][ T5877] usb 9-1: config 14 has no interface number 1 [ 167.571425][ T42] audit: type=1400 audit(1786681699.534:31849): avc: denied { accept } for pid=10109 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.574292][ T5877] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 167.582277][ T42] audit: type=1400 audit(1786681699.544:31850): avc: denied { ioctl } for pid=10109 comm="syz.2.1122" path="socket:[35217]" dev="sockfs" ino=35217 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.586914][ T5877] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 167.586941][ T5877] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 167.586963][ T5877] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 167.586984][ T5877] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 167.587037][ T5877] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.587061][ T5877] usb 9-1: config 14 interface 57 has no altsetting 0 [ 167.587077][ T5877] usb 9-1: config 14 interface 228 has no altsetting 0 [ 167.589544][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.635934][ T5877] usb 9-1: Product: syz [ 167.637784][ T5877] usb 9-1: Manufacturer: syz [ 167.639779][ T5877] usb 9-1: SerialNumber: syz [ 167.671526][T10117] syz_tun: entered allmulticast mode [ 167.679472][T10116] syz_tun: left allmulticast mode [ 167.820010][ T42] audit: type=1400 audit(1786681699.784:31851): avc: denied { append } for pid=10123 comm="syz.2.1128" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.899704][ T5877] legousbtower 9-1:14.57: interrupt endpoints not found [ 167.928619][ T5877] legousbtower 9-1:14.228: get version request failed: -71 [ 167.932665][ T5877] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 167.947707][ T5877] usb 9-1: USB disconnect, device number 3 [ 168.027077][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 168.048016][T10141] bridge1: entered promiscuous mode [ 168.050374][T10141] bridge1: entered allmulticast mode [ 168.079398][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 168.083317][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 168.146695][T10151] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 168.151102][T10152] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 168.214682][T10157] 9pnet_virtio: no channels available for device syz [ 168.225199][T10160] 9pnet_virtio: no channels available for device syz [ 168.362386][T10170] overlay: ./file0 is not a directory [ 168.371357][T10172] overlay: ./file0 is not a directory [ 168.531408][T10184] cgroup: No subsys list or none specified [ 168.611713][T10181] loop3: detected capacity change from 0 to 7 [ 168.629863][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.633948][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.649204][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.653331][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.660849][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.664858][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.676631][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.680768][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.685150][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.689248][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.693033][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.697069][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.700616][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.704645][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.707890][T10181] ldm_validate_partition_table(): Disk read failed. [ 168.727975][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.732106][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.736046][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.740216][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.744055][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.748331][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 168.751741][T10181] Dev loop3: unable to read RDB block 0 [ 168.755196][T10181] loop3: unable to read partition table [ 168.759266][T10181] loop3: partition table beyond EOD, truncated [ 168.762014][T10181] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 169.000022][T10206] netlink: 'syz.1.1152': attribute type 58 has an invalid length. [ 169.131821][ T5818] IPVS: starting estimator thread 0... [ 169.234275][T10213] IPVS: using max 43 ests per chain, 103200 per kthread [ 169.383648][ T9121] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 169.534162][ T9121] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.539894][ T9121] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.545637][ T9121] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.550332][ T9121] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.554616][ T9121] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.560174][ T9121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.570822][ T9121] usb 6-1: config 0 descriptor?? [ 169.778022][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.786151][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.922801][T10200] syz.4.1149 (10200): drop_caches: 1 [ 169.994578][T10224] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 170.041376][T10224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.063694][ T9121] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 170.091207][T10224] bond4: (slave ip6gretap2): making interface the new active one [ 170.094941][T10224] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 170.138439][T10231] 9pnet_virtio: no channels available for device syz [ 170.144165][T10231] Unsupported ieee802154 address type: 0 [ 170.360818][T10239] ip_tables: iptables: counters copy to user failed while replacing table [ 170.663388][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 171.143871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.006247][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.052837][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.074367][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.085440][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.088941][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.097150][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 172.097181][ T42] audit: type=1400 audit(1786681704.064:31894): avc: denied { mounton } for pid=10257 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 172.134500][ T5818] usb 6-1: USB disconnect, device number 14 [ 172.360904][ T5826] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.469510][ T5826] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.540416][ T5826] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.633941][ T5826] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.643752][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.647030][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.651608][T10257] bridge_slave_0: entered allmulticast mode [ 172.655958][T10257] bridge_slave_0: entered promiscuous mode [ 172.660214][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.662577][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.665405][T10257] bridge_slave_1: entered allmulticast mode [ 172.668451][T10257] bridge_slave_1: entered promiscuous mode [ 172.691176][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.698108][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.725778][T10257] team0: Port device team_slave_0 added [ 172.729286][T10257] team0: Port device team_slave_1 added [ 172.768093][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.771101][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.781595][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.788265][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.794236][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.804829][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.869379][T10257] hsr_slave_0: entered promiscuous mode [ 172.871912][T10257] hsr_slave_1: entered promiscuous mode [ 172.875272][T10257] debugfs: 'hsr0' already exists in 'hsr' [ 172.877581][T10257] Cannot create hsr debugfs directory [ 172.902738][ T5826] bridge_slave_1: left allmulticast mode [ 172.905186][ T5826] bridge_slave_1: left promiscuous mode [ 172.911900][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.935402][ T5826] bridge_slave_0: left allmulticast mode [ 172.938013][ T5826] bridge_slave_0: left promiscuous mode [ 172.948002][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.116214][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.125911][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.130303][ T5826] bond0 (unregistering): Released all slaves [ 173.409479][T10241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.453685][T10257] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.477890][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.487267][T10257] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.500567][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.513138][ T5826] hsr_slave_0: left promiscuous mode [ 173.518579][ T5826] hsr_slave_1: left promiscuous mode [ 173.520705][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.523633][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.528183][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.530924][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.542848][ T5826] veth1_macvtap: left promiscuous mode [ 173.548817][ T5826] veth0_macvtap: left promiscuous mode [ 173.550744][ T5826] veth1_vlan: left promiscuous mode [ 173.555467][ T5826] veth0_vlan: left promiscuous mode [ 173.559552][ T42] audit: type=1400 audit(1786681705.524:31895): avc: denied { write } for pid=10293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.596970][T10292] SET target dimension over the limit! [ 173.623761][ T42] audit: type=1400 audit(1786681705.594:31896): avc: denied { write } for pid=10299 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.685025][ T42] audit: type=1400 audit(1786681705.654:31897): avc: denied { connect } for pid=10307 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.733806][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 173.739335][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 173.746941][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 173.777011][ T42] audit: type=1400 audit(1786681705.744:31898): avc: denied { getopt } for pid=10313 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.856699][T10257] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.867762][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.872720][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 173.885093][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 173.887039][T10257] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.887442][ T29] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 173.897873][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.900523][ T29] usb 6-1: Product: syz [ 173.901821][ T29] usb 6-1: Manufacturer: syz [ 173.903657][ T29] usb 6-1: SerialNumber: syz [ 173.912105][ T29] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 173.927111][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.008310][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 174.038266][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.047275][T10257] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.063035][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.065589][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.078999][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.081374][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.102200][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 174.110381][ T42] audit: type=1400 audit(1786681706.074:31899): avc: denied { write } for pid=10336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.118138][T10339] block nbd1: Unsupported socket: should be TCP or UNIX. [ 174.170761][ T42] audit: type=1400 audit(1786681706.134:31900): avc: denied { write } for pid=10341 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.193639][ T5725] Bluetooth: hci4: command tx timeout [ 174.218310][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 174.306947][ T42] audit: type=1400 audit(1786681706.274:31901): avc: denied { ioctl } for pid=10354 comm="syz.2.1182" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 174.319712][ T29] usb 6-1: us122l: couldn't allocate write buffer [ 174.321505][ T42] audit: type=1400 audit(1786681706.274:31902): avc: denied { write } for pid=10351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.325669][ T29] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 174.337281][ T42] audit: type=1400 audit(1786681706.284:31903): avc: denied { mmap_zero } for pid=10354 comm="syz.2.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 174.339815][ T29] usb 6-1: USB disconnect, device number 15 [ 174.368502][ T6640] udevd[6640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.454157][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 174.480127][T10257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.655865][T10257] veth0_vlan: entered promiscuous mode [ 174.668517][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 174.684823][T10257] veth1_vlan: entered promiscuous mode [ 174.715033][T10257] veth0_macvtap: entered promiscuous mode [ 174.720595][T10257] veth1_macvtap: entered promiscuous mode [ 174.732895][T10257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.740484][T10257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.919944][ T5817] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.957663][ T6320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.964450][ T6320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.974215][ T9005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.981169][ T9005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.004769][ T6315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.009979][ T6315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.133467][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.433564][ T40] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 175.563494][ T40] usb 9-1: device descriptor read/64, error -71 [ 175.803806][ T40] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 175.933400][ T40] usb 9-1: device descriptor read/64, error -71 [ 176.048862][ T40] usb usb9-port1: attempt power cycle [ 176.263388][ T5725] Bluetooth: hci4: command tx timeout [ 176.384909][ T40] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 176.404082][ T40] usb 9-1: device descriptor read/8, error -71 [ 176.636999][T10444] netlink: 'syz.6.1167': attribute type 4 has an invalid length. [ 176.643325][ T40] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 176.649081][T10445] netlink: 'syz.6.1167': attribute type 4 has an invalid length. [ 176.651753][T10447] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 176.655537][T10447] PKCS7: Only support pkcs7_signedData type [ 176.664219][ T40] usb 9-1: device descriptor read/8, error -71 [ 176.687612][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1193'. [ 176.726015][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 176.773582][ T40] usb usb9-port1: unable to enumerate USB device [ 176.903438][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 177.033396][ T29] usb 6-1: device descriptor read/64, error -71 [ 177.279770][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 177.413484][ T29] usb 6-1: device descriptor read/64, error -71 [ 177.523638][ T29] usb usb6-port1: attempt power cycle [ 177.628074][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 177.628139][ T42] audit: type=1400 audit(1786681709.594:31918): avc: denied { setopt } for pid=10474 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.685345][ T42] audit: type=1400 audit(1786681709.654:31919): avc: denied { write } for pid=10479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.702828][ T42] audit: type=1400 audit(1786681709.664:31920): avc: denied { mount } for pid=10481 comm="syz.6.1201" name="/" dev="rpc_pipefs" ino=39184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 177.725780][ T42] audit: type=1400 audit(1786681709.694:31921): avc: denied { unmount } for pid=10257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 177.747814][ T42] audit: type=1400 audit(1786681709.714:31922): avc: denied { write } for pid=10487 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.781183][ T42] audit: type=1400 audit(1786681709.744:31923): avc: denied { link } for pid=10489 comm="syz.6.1202" name="#36" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.795925][ T42] audit: type=1400 audit(1786681709.754:31924): avc: denied { rename } for pid=10489 comm="syz.6.1202" name="#37" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.829411][T10493] tmpfs: Unknown parameter './file0' [ 177.831745][T10493] tmpfs: Unknown parameter './file0' [ 177.834411][T10493] tmpfs: Unknown parameter './file0' [ 177.836962][T10493] tmpfs: Unknown parameter './file0' [ 177.839434][T10493] tmpfs: Unknown parameter './file0' [ 177.840666][T10496] futex_wake_op: syz.2.1204 tries to shift op by -1; fix this program [ 177.845080][T10493] tmpfs: Unknown parameter './file0' [ 177.845236][T10493] tmpfs: Unknown parameter './file0' [ 177.845396][T10493] tmpfs: Unknown parameter './file0' [ 177.845533][T10493] tmpfs: Unknown parameter './file0' [ 177.845717][T10493] tmpfs: Unknown parameter './file0' [ 177.845875][T10493] tmpfs: Unknown parameter './file0' [ 177.846062][T10493] tmpfs: Unknown parameter './file0' [ 177.862194][T10493] tmpfs: Unknown parameter './file0' [ 177.864188][ T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 177.868272][T10493] tmpfs: Unknown parameter './file0' [ 177.870585][T10493] tmpfs: Unknown parameter './file0' [ 177.872653][T10493] tmpfs: Unknown parameter './file0' [ 177.875010][T10493] tmpfs: Unknown parameter './file0' [ 177.877999][T10493] tmpfs: Unknown parameter './file0' [ 177.879892][T10493] tmpfs: Unknown parameter './file0' [ 177.881618][T10493] tmpfs: Unknown parameter './file0' [ 177.883566][T10493] tmpfs: Unknown parameter './file0' [ 177.884270][ T29] usb 6-1: device descriptor read/8, error -71 [ 177.885668][T10493] tmpfs: Unknown parameter './file0' [ 177.889835][T10493] tmpfs: Unknown parameter './file0' [ 177.891654][T10493] tmpfs: Unknown parameter './file0' [ 177.893972][T10493] tmpfs: Unknown parameter './file0' [ 177.897095][T10493] tmpfs: Unknown parameter './file0' [ 177.899470][T10493] tmpfs: Unknown parameter './file0' [ 177.901771][T10493] tmpfs: Unknown parameter './file0' [ 177.904164][T10493] tmpfs: Unknown parameter './file0' [ 177.906145][T10493] tmpfs: Unknown parameter './file0' [ 177.907922][T10493] tmpfs: Unknown parameter './file0' [ 177.909735][T10493] tmpfs: Unknown parameter './file0' [ 177.911535][T10493] tmpfs: Unknown parameter './file0' [ 177.913485][T10493] tmpfs: Unknown parameter './file0' [ 177.915700][T10493] tmpfs: Unknown parameter './file0' [ 177.918118][T10493] tmpfs: Unknown parameter './file0' [ 177.919933][T10493] tmpfs: Unknown parameter './file0' [ 177.921743][T10493] tmpfs: Unknown parameter './file0' [ 177.924020][T10493] tmpfs: Unknown parameter './file0' [ 177.926314][T10493] tmpfs: Unknown parameter './file0' [ 177.928588][T10493] tmpfs: Unknown parameter './file0' [ 177.930355][T10493] tmpfs: Unknown parameter './file0' [ 177.932403][T10493] tmpfs: Unknown parameter './file0' [ 177.935210][T10493] tmpfs: Unknown parameter './file0' [ 177.937428][ T42] audit: type=1400 audit(1786681709.904:31925): avc: denied { append } for pid=10499 comm="syz.2.1206" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.945208][T10493] tmpfs: Unknown parameter './file0' [ 177.947591][T10493] tmpfs: Unknown parameter './file0' [ 177.949986][T10493] tmpfs: Unknown parameter './file0' [ 177.951882][T10493] tmpfs: Unknown parameter './file0' [ 177.954098][T10493] tmpfs: Unknown parameter './file0' [ 177.955937][T10493] tmpfs: Unknown parameter './file0' [ 177.957721][T10493] tmpfs: Unknown parameter './file0' [ 177.959456][T10493] tmpfs: Unknown parameter './file0' [ 177.961306][T10493] tmpfs: Unknown parameter './file0' [ 177.963172][T10493] tmpfs: Unknown parameter './file0' [ 177.965345][T10493] tmpfs: Unknown parameter './file0' [ 177.967261][T10493] tmpfs: Unknown parameter './file0' [ 177.969123][T10493] tmpfs: Unknown parameter './file0' [ 177.970974][T10493] tmpfs: Unknown parameter './file0' [ 177.973098][T10493] tmpfs: Unknown parameter './file0' [ 177.976191][T10493] tmpfs: Unknown parameter './file0' [ 177.978020][T10493] tmpfs: Unknown parameter './file0' [ 177.979822][T10493] tmpfs: Unknown parameter './file0' [ 177.981634][T10493] tmpfs: Unknown parameter './file0' [ 177.983894][T10493] tmpfs: Unknown parameter './file0' [ 177.985663][T10493] tmpfs: Unknown parameter './file0' [ 178.024353][ T42] audit: type=1400 audit(1786681709.994:31926): avc: denied { read } for pid=10502 comm="syz.6.1207" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 178.032079][ T42] audit: type=1400 audit(1786681709.994:31927): avc: denied { open } for pid=10502 comm="syz.6.1207" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 178.100093][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 178.133430][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 178.154373][ T29] usb 6-1: device descriptor read/8, error -71 [ 178.263773][ T29] usb usb6-port1: unable to enumerate USB device [ 178.344020][ T5739] Bluetooth: hci4: command tx timeout [ 178.372706][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 178.683784][ T5818] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 178.731934][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 178.762313][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 178.854388][ T5818] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.867254][ T5818] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.871007][ T5818] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 178.875706][ T5818] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.879462][ T5818] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.885823][ T5818] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 178.890172][ T5818] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.896366][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.899469][ T5818] usb 9-1: Product: syz [ 178.900990][ T5818] usb 9-1: Manufacturer: syz [ 178.906994][T10522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.910748][ T5818] cdc_wdm 9-1:1.0: skipping garbage [ 178.912997][ T5818] cdc_wdm 9-1:1.0: skipping garbage [ 178.920407][ T5818] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 178.922257][ T5818] cdc_wdm 9-1:1.0: Unknown control protocol [ 179.119109][ T5877] usb 9-1: USB disconnect, device number 8 [ 179.749296][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 179.779992][T10566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 179.782567][T10566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.786437][T10566] vhci_hcd vhci_hcd.0: Device attached [ 179.792047][T10566] vhci_hcd vhci_hcd.0: port 0 already used [ 179.810185][T10568] vhci_hcd: connection closed [ 179.810434][ T5817] vhci_hcd vhci_hcd.1: stop threads [ 179.816469][ T5817] vhci_hcd vhci_hcd.1: release socket [ 179.819423][ T5817] vhci_hcd vhci_hcd.1: disconnect device [ 180.013337][ T1488] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 180.103481][ T5739] Bluetooth: hci1: command 0xfc11 tx timeout [ 180.108946][ T5725] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 180.158416][ T1488] usb 7-1: device descriptor read/64, error -71 [ 180.403456][ T1488] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 180.423577][ T5725] Bluetooth: hci4: command tx timeout [ 180.543590][ T1488] usb 7-1: device descriptor read/64, error -71 [ 180.656100][ T1488] usb usb7-port1: attempt power cycle [ 180.782518][T10589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60688 sclass=netlink_route_socket pid=10589 comm=syz.4.1233 [ 180.983469][ T5877] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 181.013376][ T1488] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 181.034314][ T1488] usb 7-1: device descriptor read/8, error -71 [ 181.143381][ T5818] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 181.145641][ T5877] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.150969][ T5877] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.154586][ T5877] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.157697][ T5877] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.160679][ T5877] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.165652][ T5877] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.168344][ T5877] usb 11-1: Manufacturer: syz [ 181.175679][ T5877] usb 11-1: config 0 descriptor?? [ 181.193371][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 181.283312][ T1488] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 181.303876][ T1488] usb 7-1: device descriptor read/8, error -71 [ 181.304416][ T5818] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.310664][ T5818] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.315090][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.319353][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.323186][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.324422][ T34] usb 9-1: device descriptor read/64, error -71 [ 181.329496][ T5818] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.334288][ T5818] usb 6-1: Manufacturer: syz [ 181.338345][ T5818] usb 6-1: config 0 descriptor?? [ 181.423675][ T1488] usb usb7-port1: unable to enumerate USB device [ 181.583099][ T5877] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 181.583455][ T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 181.592046][ T5877] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 181.713456][ T34] usb 9-1: device descriptor read/64, error -71 [ 181.745586][ T5818] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 181.754665][ T5818] appleir 0003:05AC:8243.0007: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 181.823919][ T34] usb usb9-port1: attempt power cycle [ 182.163822][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 182.184096][ T34] usb 9-1: device descriptor read/8, error -71 [ 182.453364][ T34] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 182.475041][ T34] usb 9-1: device descriptor read/8, error -71 [ 182.594408][ T34] usb usb9-port1: unable to enumerate USB device [ 182.823080][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 182.823100][ T42] audit: type=1400 audit(1786681714.784:31943): avc: denied { read append } for pid=10614 comm="syz.2.1238" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 182.828048][T10615] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 182.841042][ T42] audit: type=1400 audit(1786681714.784:31944): avc: denied { open } for pid=10614 comm="syz.2.1238" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 182.854707][T10615] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 182.862214][ T42] audit: type=1400 audit(1786681714.794:31945): avc: denied { ioctl } for pid=10614 comm="syz.2.1238" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 182.873352][ T42] audit: type=1400 audit(1786681714.814:31946): avc: denied { write } for pid=10613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.877728][ T5818] usb 6-1: USB disconnect, device number 20 [ 182.930284][ T42] audit: type=1400 audit(1786681714.894:31947): avc: denied { write } for pid=10618 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.019227][ T42] audit: type=1400 audit(1786681714.984:31948): avc: denied { write } for pid=10624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.067788][ T42] audit: type=1400 audit(1786681715.034:31949): avc: denied { write } for pid=10632 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.091127][ T42] audit: type=1400 audit(1786681715.054:31950): avc: denied { bind } for pid=10634 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 183.120291][T10638] syz.2.1244 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.128561][ T42] audit: type=1400 audit(1786681715.104:31951): avc: denied { read } for pid=10636 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.154138][ T42] audit: type=1400 audit(1786681715.124:31952): avc: denied { write } for pid=10637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.423205][T10648] gfs2: not a GFS2 filesystem [ 183.434414][T10648] gfs2: not a GFS2 filesystem [ 183.439180][T10648] gfs2: not a GFS2 filesystem [ 183.441217][T10648] gfs2: not a GFS2 filesystem [ 183.444191][T10648] gfs2: not a GFS2 filesystem [ 183.446168][T10648] gfs2: not a GFS2 filesystem [ 183.448404][T10648] gfs2: not a GFS2 filesystem [ 183.450375][T10648] gfs2: not a GFS2 filesystem [ 183.452285][T10648] gfs2: not a GFS2 filesystem [ 183.454679][T10648] gfs2: not a GFS2 filesystem [ 183.459305][T10648] gfs2: not a GFS2 filesystem [ 183.461213][T10648] gfs2: not a GFS2 filesystem [ 183.463206][T10648] gfs2: not a GFS2 filesystem [ 183.467679][T10648] gfs2: not a GFS2 filesystem [ 183.469860][T10648] gfs2: not a GFS2 filesystem [ 183.471845][T10648] gfs2: not a GFS2 filesystem [ 183.475624][T10648] gfs2: not a GFS2 filesystem [ 183.477808][T10648] gfs2: not a GFS2 filesystem [ 183.479963][T10648] gfs2: not a GFS2 filesystem [ 183.482292][T10648] gfs2: not a GFS2 filesystem [ 183.486568][T10648] gfs2: not a GFS2 filesystem [ 183.488777][T10648] gfs2: not a GFS2 filesystem [ 183.490968][T10648] gfs2: not a GFS2 filesystem [ 183.493676][T10648] gfs2: not a GFS2 filesystem [ 183.495820][T10648] gfs2: not a GFS2 filesystem [ 183.497817][T10648] gfs2: not a GFS2 filesystem [ 183.499925][T10648] gfs2: not a GFS2 filesystem [ 183.503831][T10648] gfs2: not a GFS2 filesystem [ 183.505886][T10648] gfs2: not a GFS2 filesystem [ 183.507917][T10648] gfs2: not a GFS2 filesystem [ 183.510010][T10648] gfs2: not a GFS2 filesystem [ 183.512025][T10648] gfs2: not a GFS2 filesystem [ 183.515164][T10648] gfs2: not a GFS2 filesystem [ 183.612802][ T1488] usb 11-1: USB disconnect, device number 2 [ 183.843026][T10662] JFS: charset not found [ 183.996108][T10674] 9pnet_virtio: no channels available for device syz [ 184.174374][T10691] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1259'. [ 184.240584][T10696] netlink: 'syz.6.1261': attribute type 1 has an invalid length. [ 184.303626][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 184.353387][ T60] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 184.464144][ T34] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.468312][ T34] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.472127][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.476189][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.479997][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.485268][ T34] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.487827][ T34] usb 7-1: Manufacturer: syz [ 184.490735][ T34] usb 7-1: config 0 descriptor?? [ 184.504167][ T60] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.508231][ T60] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.511576][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.515839][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.519854][ T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.526441][ T60] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.527441][T10711] overlayfs: upper fs does not support file handles, falling back to index=off. [ 184.529763][ T60] usb 9-1: Manufacturer: syz [ 184.535172][T10711] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 184.543552][ T60] usb 9-1: config 0 descriptor?? [ 184.716182][ T5725] Bluetooth: hci0: unexpected event for opcode 0x201c [ 184.902523][ T34] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 184.911252][ T34] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 184.952424][ T60] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 184.961064][ T60] appleir 0003:05AC:8243.0009: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 185.025908][T10737] 9pnet_virtio: no channels available for device syz [ 186.219972][ T29] usb 9-1: USB disconnect, device number 13 [ 186.751758][T10775] TCP: TCP_TX_DELAY enabled [ 186.993831][ T1488] usb 7-1: USB disconnect, device number 14 [ 187.483476][ T1350] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 187.591270][T10811] netlink: 'syz.2.1283': attribute type 21 has an invalid length. [ 187.594676][T10811] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.599099][T10811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.602145][T10811] IPv6: NLM_F_CREATE should be set when creating new route [ 187.605270][T10811] IPv6: NLM_F_CREATE should be set when creating new route [ 187.608326][T10811] IPv6: NLM_F_CREATE should be set when creating new route [ 187.621574][T10811] netlink: 'syz.2.1283': attribute type 21 has an invalid length. [ 187.625197][T10811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.664257][ T1350] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 187.669862][ T1350] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 187.675490][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.679941][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.684142][ T1350] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.691240][ T1350] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 187.695227][ T1350] usb 6-1: Manufacturer: syz [ 187.702205][ T1350] usb 6-1: config 0 descriptor?? [ 187.848180][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 187.848194][ T42] audit: type=1400 audit(1786681719.814:31981): avc: denied { ioctl } for pid=10813 comm="syz.2.1285" path="socket:[39499]" dev="sockfs" ino=39499 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 187.887315][T10816] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 187.889392][T10816] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.893352][T10816] vhci_hcd vhci_hcd.0: Device attached [ 188.125661][ T1350] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 188.130292][ T1350] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 188.153524][ T34] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 188.283377][ T40] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 188.435563][ T40] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 188.440508][ T40] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 188.445565][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.449828][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.454044][ T40] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 188.459936][ T40] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 188.462975][ T40] usb 9-1: Manufacturer: syz [ 188.466766][ T40] usb 9-1: config 0 descriptor?? [ 188.718484][T10817] vhci_hcd: connection reset by peer [ 188.720569][ T5826] vhci_hcd vhci_hcd.2: stop threads [ 188.722212][ T5826] vhci_hcd vhci_hcd.2: release socket [ 188.728587][ T5826] vhci_hcd vhci_hcd.2: disconnect device [ 188.882595][ T40] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 188.887550][ T40] appleir 0003:05AC:8243.000B: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 189.123613][ T1488] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 189.294160][ T1488] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 189.298809][ T1488] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 189.303631][ T1488] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 189.310108][ T1488] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.313611][ T1488] usb 11-1: Product: syz [ 189.315439][ T1488] usb 11-1: Manufacturer: syz [ 189.320848][ T1488] usb 11-1: SerialNumber: syz [ 189.326061][ T1488] usb 11-1: config 0 descriptor?? [ 189.329914][ T1488] hub 11-1:0.0: bad descriptor, ignoring hub [ 189.332694][ T1488] hub 11-1:0.0: probe with driver hub failed with error -5 [ 189.345942][ T1488] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input15 [ 189.353039][ T42] audit: type=1400 audit(1786681721.314:31982): avc: denied { read } for pid=5122 comm="acpid" name="mouse2" dev="devtmpfs" ino=3115 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.360369][ T42] audit: type=1400 audit(1786681721.314:31983): avc: denied { open } for pid=5122 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3115 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.445389][ T40] usb 9-1: USB disconnect, device number 14 [ 189.486307][ T42] audit: type=1400 audit(1786681721.454:31984): avc: denied { write } for pid=10834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.542562][ T42] audit: type=1400 audit(1786681721.504:31985): avc: denied { write } for pid=10837 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.599630][T10840] bond1: (slave sit0): Device is not bonding slave [ 189.601637][T10840] bond1: option active_slave: invalid value (sit0) [ 189.606356][T10840] bond1 (unregistering): Released all slaves [ 189.617993][ T42] audit: type=1400 audit(1786681721.584:31986): avc: denied { write } for pid=10839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.665281][ T42] audit: type=1400 audit(1786681721.634:31987): avc: denied { write } for pid=10844 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.762987][ T42] audit: type=1400 audit(1786681721.724:31988): avc: denied { write } for pid=10846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.819077][ T42] audit: type=1400 audit(1786681721.784:31989): avc: denied { write } for pid=10849 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.083680][T10854] netlink: Conntrack attr has 8 unknown bytes [ 190.085731][T10854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.101449][T10854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.163345][T10860] qrtr: Invalid version 0 [ 190.226801][ T59] usb 6-1: USB disconnect, device number 21 [ 190.281177][T10873] CIFS: Attempting to mount //127.0.0.1/test [ 190.357926][ T42] audit: type=1400 audit(1786681722.324:31990): avc: denied { write } for pid=10880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.513414][ T1488] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 190.519554][T10887] netlink: 484 bytes leftover after parsing attributes in process `syz.6.1300'. [ 190.613494][ T59] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 190.697366][ T1488] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 190.701130][ T1488] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 190.705012][ T1488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.708290][ T1488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.711122][ T1488] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 190.715928][ T1488] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 190.718423][ T1488] usb 9-1: Manufacturer: syz [ 190.721348][ T1488] usb 9-1: config 0 descriptor?? [ 190.763924][ T59] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 190.767583][ T59] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 190.771023][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.774507][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.777588][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 190.782423][ T59] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 190.785427][ T59] usb 6-1: Manufacturer: syz [ 190.788462][ T59] usb 6-1: config 0 descriptor?? [ 191.105880][T10873] CIFS: VFS: cifs_mount failed w/return code = -112 [ 191.127399][ T1488] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 191.136111][ T1488] appleir 0003:05AC:8243.000C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 191.198453][ T59] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 191.211629][T10892] bond5: entered promiscuous mode [ 191.213587][T10892] bond5: entered allmulticast mode [ 191.215610][T10892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.217710][ T59] appleir 0003:05AC:8243.000D: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 191.257028][T10896] xt_hashlimit: size too large, truncated to 1048576 [ 191.477267][T10911] ptrace attach of "/syz-executor exec"[10257] was attempted by ""[10911] [ 191.512650][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1309'. [ 191.601150][T10920] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 191.679925][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1311'. [ 191.788883][T10930] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1313'. [ 192.025311][T10935] netlink: 'syz.6.1315': attribute type 1 has an invalid length. [ 192.028600][T10935] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1315'. [ 192.032294][T10935] netlink: 'syz.6.1315': attribute type 1 has an invalid length. [ 192.149792][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 192.199846][T10939] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.214558][T10939] kvm: pic: non byte read [ 192.218484][T10939] kvm: pic: level sensitive irq not supported [ 192.219425][T10939] kvm: pic: non byte read [ 192.226683][T10939] kvm: pic: level sensitive irq not supported [ 192.227427][T10939] kvm: pic: non byte read [ 192.371752][ T40] usb 6-1: USB disconnect, device number 22 [ 192.487859][T10955] syz.6.1321(10955): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 192.528385][T10959] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1322'. [ 192.665469][T10972] program syz.6.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.668495][T10972] ata1.00: invalid service action 3 [ 192.701411][T10980] trusted_key: encrypted_key: keyword 'u' not recognized [ 193.165701][ T1488] usb 9-1: USB disconnect, device number 15 [ 193.167014][ T5826] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.176948][ T5826] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.186511][ T5826] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.194109][ T5826] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.270094][ T6817] usb 11-1: USB disconnect, device number 3 [ 193.303843][ T34] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 193.349990][T11016] netlink: 'syz.6.1337': attribute type 3 has an invalid length. [ 193.368390][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 193.368414][ T42] audit: type=1400 audit(1786681725.344:32005): avc: denied { write } for pid=11028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.379523][T11016] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 193.428061][ T42] audit: type=1400 audit(1786681725.394:32006): avc: denied { write } for pid=11031 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.523374][ T5818] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 193.527833][ T42] audit: type=1400 audit(1786681725.494:32007): avc: denied { setopt } for pid=11035 comm="syz.6.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.543904][ T1488] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 193.673719][ T5818] usb 7-1: Using ep0 maxpacket: 8 [ 193.677196][ T5818] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.682348][ T5818] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 193.687512][ T5818] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 193.694080][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.697515][ T5818] usb 7-1: Product: syz [ 193.699247][ T5818] usb 7-1: Manufacturer: syz [ 193.701157][ T5818] usb 7-1: SerialNumber: syz [ 193.736285][ T1488] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 193.741508][ T1488] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.749077][ T1488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.753752][ T1488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.757843][ T1488] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.764642][ T1488] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 193.768064][ T1488] usb 9-1: Manufacturer: syz [ 193.772423][ T1488] usb 9-1: config 0 descriptor?? [ 193.963521][ T6817] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 194.113809][ T6817] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 194.116949][ T42] audit: type=1400 audit(1786681726.084:32008): avc: denied { read } for pid=11052 comm="syz.1.1348" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 194.117603][ T6817] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 194.124703][ T42] audit: type=1400 audit(1786681726.084:32009): avc: denied { open } for pid=11052 comm="syz.1.1348" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 194.128492][ T6817] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.139585][ T6817] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.142688][ T6817] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 194.147860][ T6817] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 194.150441][ T6817] usb 11-1: Manufacturer: syz [ 194.153951][ T6817] usb 11-1: config 0 descriptor?? [ 194.180082][ T1488] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 194.195140][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196290][ T1488] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 194.197193][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.223603][ T5818] cdc_ncm 7-1:1.0: bind() failure [ 194.238975][ T5818] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 194.241614][ T5818] cdc_ncm 7-1:1.1: bind() failure [ 194.247133][ T5818] usb 7-1: USB disconnect, device number 15 [ 194.251861][ T6640] udevd[6640]: setting owner of /dev/bus/usb/007/015 to uid=0, gid=0 failed: No such file or directory [ 194.312353][T11062] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 194.316132][T11062] ALSA: mixer_oss: invalid index 137438 [ 194.388238][T11070] sctp: [Deprecated]: syz.1.1353 (pid 11070) Use of int in max_burst socket option. [ 194.388238][T11070] Use struct sctp_assoc_value instead [ 194.425023][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 194.564360][ T6817] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 194.572568][ T6817] appleir 0003:05AC:8243.000F: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 194.761959][T11081] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 194.772634][T11081] exFAT-fs (nullb0): invalid boot record signature [ 194.775854][T11081] exFAT-fs (nullb0): failed to read boot sector [ 194.780647][T11081] exFAT-fs (nullb0): failed to recognize exfat type [ 194.787304][ T42] audit: type=1400 audit(1786681726.754:32010): avc: denied { setattr } for pid=11080 comm="syz.1.1356" name="NETLINK" dev="sockfs" ino=41150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.826283][T11083] XFS (nbd2): SB validate failed with error -5. [ 195.011767][T11099] binder: 11098:11099 ioctl c0306201 200000000640 returned -22 [ 195.018018][ T42] audit: type=1400 audit(1786681726.984:32011): avc: denied { read } for pid=11098 comm="syz.2.1359" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.023051][T11099] binder: 11098:11099 ioctl c008640a 200000000080 returned -22 [ 195.026613][ T42] audit: type=1400 audit(1786681726.984:32012): avc: denied { open } for pid=11098 comm="syz.2.1359" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.040573][ T42] audit: type=1400 audit(1786681726.984:32013): avc: denied { ioctl } for pid=11098 comm="syz.2.1359" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.290373][ T42] audit: type=1400 audit(1786681727.254:32014): avc: denied { read } for pid=11104 comm="syz.1.1361" path="socket:[42086]" dev="sockfs" ino=42086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 195.339062][T11105] netlink: 'syz.1.1361': attribute type 21 has an invalid length. [ 195.342439][T11105] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1361'. [ 195.346865][T11105] netlink: 'syz.1.1361': attribute type 5 has an invalid length. [ 195.350225][T11105] netlink: 'syz.1.1361': attribute type 6 has an invalid length. [ 195.353893][T11105] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1361'. [ 195.479194][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 195.482949][T11118] netlink: 'syz.1.1365': attribute type 15 has an invalid length. [ 195.511269][ T60] usb 11-1: USB disconnect, device number 4 [ 195.929508][T11148] vivid-000: ================= START STATUS ================= [ 195.934181][T11148] vivid-000: Test Pattern: 75% Colorbar [ 195.937384][T11148] vivid-000: Fill Percentage of Frame: 100 [ 195.939308][T11148] vivid-000: Horizontal Movement: Move Right Slow [ 195.941386][T11148] vivid-000: Vertical Movement: No Movement [ 195.943589][T11148] vivid-000: OSD Text Mode: All [ 195.945189][T11148] vivid-000: Show Border: true [ 195.946736][T11148] vivid-000: Show Square: false [ 195.948328][T11148] vivid-000: Sensor Flipped Horizontally: false [ 195.950328][T11148] vivid-000: Sensor Flipped Vertically: false [ 195.952286][T11148] vivid-000: Insert SAV Code in Image: true [ 195.958344][T11148] vivid-000: Insert EAV Code in Image: false [ 195.960686][T11148] vivid-000: Insert Video Guard Band: false [ 195.962999][T11148] vivid-000: Reduced Framerate: false [ 195.965183][T11148] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 195.968174][T11148] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 002-0 [ 195.971205][T11148] vivid-000: Enable Capture Cropping: true [ 195.973925][T11148] vivid-000: Enable Capture Composing: true [ 195.976282][T11148] vivid-000: Enable Capture Scaler: true [ 195.978425][T11148] vivid-000: Timestamp Source: End of Frame [ 195.980860][T11148] vivid-000: Colorspace: sRGB [ 195.982864][T11148] vivid-000: Transfer Function: Default [ 195.985271][T11148] vivid-000: Y'CbCr Encoding: Default [ 195.987077][T11148] vivid-000: HSV Encoding: Hue 0-256 [ 195.988994][T11148] vivid-000: Quantization: Default [ 195.991007][T11148] vivid-000: Apply Alpha To Red Only: false [ 195.993396][T11148] vivid-000: Standard Aspect Ratio: 4x3 [ 195.995544][T11148] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 195.998502][T11148] vivid-000: DV Timings: 4096x2160p60 inactive [ 196.000935][T11148] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 196.004111][T11148] vivid-000: Maximum EDID Blocks: 2 [ 196.006148][T11148] vivid-000: Limited RGB Range (16-235): false [ 196.008232][T11148] vivid-000: Rx RGB Quantization Range: Automatic [ 196.010712][T11148] vivid-000: Power Present: 0x00000001 [ 196.012872][T11148] tpg source WxH: 320x240 (Luma) [ 196.014939][T11148] tpg field: 1 [ 196.016323][T11148] tpg crop: (0,0)/320x240 [ 196.017910][T11148] tpg compose: (0,0)/320x240 [ 196.019439][T11148] tpg colorspace: 8 [ 196.020688][T11148] tpg transfer function: 0/0 [ 196.022180][T11148] tpg quantization: 0/0 [ 196.024490][T11148] tpg RGB range: 0/2 [ 196.026243][T11148] vivid-000: ================== END STATUS ================== [ 196.043705][T11148] gadgetfs: bound to dummy_udc driver [ 196.185153][T11158] ALSA: mixer_oss: invalid OSS volume 'GPL' [ 196.187918][T11158] ALSA: mixer_oss: invalid OSS volume '@' [ 196.190372][T11158] ALSA: mixer_oss: invalid OSS volume '|' [ 196.192856][T11158] ALSA: mixer_oss: invalid OSS volume '' [ 196.197453][T11158] ALSA: mixer_oss: invalid OSS volume '' [ 196.200675][T11158] ALSA: mixer_oss: invalid OSS volume '' [ 196.202406][T11158] ALSA: mixer_oss: invalid OSS volume '' [ 196.205099][T11158] ALSA: mixer_oss: invalid OSS volume '' [ 196.207778][T11158] ALSA: mixer_oss: invalid OSS volume '' [ 196.239830][T11152] __nla_validate_parse: 1 callbacks suppressed [ 196.239844][T11152] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1372'. [ 196.251876][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.281182][ T6817] usb 9-1: USB disconnect, device number 16 [ 196.293625][ T34] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.297917][ C3] gadgetfs: connected [ 196.299930][ T34] gadgetfs: disconnected [ 196.383014][T11174] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 196.387190][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 196.391252][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1379'. [ 196.456318][ C3] gadgetfs: connected [ 196.463445][ T34] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 196.468430][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.486249][ C3] gadgetfs: configuration #1 [ 196.516434][ T34] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input16 [ 196.756931][T11147] gadgetfs: suspended from state 3 [ 196.763762][ T1488] usb 5-1: USB disconnect, device number 8 [ 196.766067][T11147] gadgetfs: disconnected [ 196.933392][ T5877] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 197.003608][ T5818] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 197.025213][T11206] openvswitch: netlink: IP tunnel dst address not specified [ 197.088643][ T5877] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.097696][ T5877] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.102310][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.109313][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.113100][ T5877] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.122006][ T5877] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.125598][ T5877] usb 9-1: Manufacturer: syz [ 197.129114][ T5877] usb 9-1: config 0 descriptor?? [ 197.164934][ T5818] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.169596][ T5818] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.173645][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.177100][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.180288][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.185462][ T5818] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.188050][ T5818] usb 6-1: Manufacturer: syz [ 197.191112][ T5818] usb 6-1: config 0 descriptor?? [ 197.312167][T11222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.316858][T11222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.421752][T11222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.427111][T11222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.538487][ T5877] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 197.539823][T11222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.543594][ T5877] appleir 0003:05AC:8243.0010: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 197.545064][T11222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.602697][ T5818] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 197.606612][ T5818] appleir 0003:05AC:8243.0011: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 197.669358][T11222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.672746][T11222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.823361][ T9005] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.826108][ T9005] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.853495][ T9005] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.856693][ T9005] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.860273][ T9005] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.865423][ T9005] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.873553][ T9005] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.876038][ T9005] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.967233][T11245] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:1": -EINTR [ 198.016056][T11251] FAT-fs (nbd6): unable to read boot sector [ 198.097843][ T5725] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 198.115845][T11257] team0 (unregistering): Port device xfrm0 removed [ 198.564512][T11265] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 198.571732][T11265] comedi: No check for data length of config insn id 65560 is implemented [ 198.574646][T11265] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 198.577600][T11265] comedi: Assuming n=15 is correct [ 198.631493][T11267] : renamed from vlan0 (while UP) [ 198.637853][T11267] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 198.701270][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 198.701295][ T42] audit: type=1400 audit(1786681730.664:32041): avc: denied { create } for pid=11268 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.710693][ T42] audit: type=1400 audit(1786681730.664:32042): avc: denied { ioctl } for pid=11268 comm="syz.6.1402" path="socket:[41598]" dev="sockfs" ino=41598 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.805682][ T42] audit: type=1400 audit(1786681730.774:32043): avc: denied { write } for pid=11271 comm="syz.6.1403" name="num_groups" dev="configfs" ino=40694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 198.815051][ T42] audit: type=1400 audit(1786681730.774:32044): avc: denied { open } for pid=11271 comm="syz.6.1403" path="/59/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups" dev="configfs" ino=40694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 198.859084][ T1350] usb 6-1: USB disconnect, device number 23 [ 198.906181][ T42] audit: type=1400 audit(1786681730.874:32045): avc: denied { write } for pid=11273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.980988][ T42] audit: type=1400 audit(1786681730.944:32046): avc: denied { write } for pid=11276 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.065170][ T42] audit: type=1400 audit(1786681731.034:32047): avc: denied { write } for pid=11284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.134344][ T42] audit: type=1400 audit(1786681731.104:32048): avc: denied { write } for pid=11287 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.204727][ T42] audit: type=1400 audit(1786681731.174:32049): avc: denied { write } for pid=11289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.225717][ T5810] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 199.260997][ T42] audit: type=1400 audit(1786681731.224:32050): avc: denied { write } for pid=11292 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.374729][ T5810] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.379035][ T5810] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.381879][ T5810] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.385762][ T5810] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.389510][ T5810] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.393971][ T5810] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.398764][ T5810] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.401756][ T5810] usb 11-1: Product: syz [ 199.403627][ T5810] usb 11-1: Manufacturer: syz [ 199.409598][ T5810] cdc_wdm 11-1:1.0: skipping garbage [ 199.411686][ T5810] cdc_wdm 11-1:1.0: skipping garbage [ 199.417507][ T5810] cdc_wdm 11-1:1.0: cdc-wdm1: USB WDM device [ 199.419483][ T5810] cdc_wdm 11-1:1.0: Unknown control protocol [ 199.429243][T11295] program syz.1.1406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.482326][T11299] tipc: Started in network mode [ 199.484604][T11299] tipc: Node identity 4004, cluster identity 4711 [ 199.487343][T11299] tipc: Node number set to 16388 [ 199.540458][T11295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1406'. [ 199.626244][T11312] nvme nvme0: rdma_resolve_addr failed (-19). [ 199.654673][ T1488] usb 9-1: USB disconnect, device number 17 [ 199.664915][ T5810] usb 11-1: USB disconnect, device number 5 [ 199.913391][ T6817] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 200.053388][ T1488] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 200.064195][ T6817] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 200.068942][ T6817] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 200.073203][ T6817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.076882][ T6817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.080000][ T6817] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 200.085594][ T6817] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 200.089005][ T6817] usb 6-1: Manufacturer: syz [ 200.093111][ T6817] usb 6-1: config 0 descriptor?? [ 200.203354][ T5810] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 200.213851][ T1488] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 200.217639][ T1488] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 200.221098][ T1488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.225458][ T1488] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.228536][ T1488] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 200.233398][ T1488] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 200.235865][ T1488] usb 9-1: Manufacturer: syz [ 200.241906][ T1488] usb 9-1: config 0 descriptor?? [ 200.356233][ T5810] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 200.360978][ T5810] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 200.364842][ T5810] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.368256][ T5810] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.371433][ T5810] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 200.377962][ T5810] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 200.381182][ T5810] usb 11-1: Manufacturer: syz [ 200.391646][ T5810] usb 11-1: config 0 descriptor?? [ 200.458771][T11352] overlayfs: missing 'lowerdir' [ 200.502798][ T6817] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 200.510909][ T6817] appleir 0003:05AC:8243.0012: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 200.526020][T11353] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 200.526126][T11354] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 200.535695][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 200.535740][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 200.649867][ T1488] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 200.659711][ T1488] appleir 0003:05AC:8243.0013: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 200.776308][ T1488] usb 6-1: USB disconnect, device number 24 [ 200.819309][ T5810] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 200.832735][ T5810] appleir 0003:05AC:8243.0014: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 200.855894][ T5810] usb 9-1: USB disconnect, device number 18 [ 201.259463][T11404] 9pnet_virtio: no channels available for device syz [ 201.296152][T11404] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.424022][T11412] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 201.428080][T11412] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 201.711832][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 201.714888][ T6817] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 201.718624][T11425] macvtap0: entered allmulticast mode [ 201.721122][T11425] veth0_macvtap: entered allmulticast mode [ 201.863737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.868361][ T6817] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.875201][ T6817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.879300][ T6817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.882415][ T6817] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.886767][ T6817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.891188][ T6817] usb 9-1: config 0 descriptor?? [ 202.313040][ T6817] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 202.424103][ T5818] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 202.547494][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1445'. [ 202.574098][ T6817] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 202.586086][ T5818] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 202.590408][T11457] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 202.594675][ T5818] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.601494][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.602055][T11457] bond9: option mode: invalid value (7) [ 202.606937][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.611094][T11457] bond9 (unregistering): Released all slaves [ 202.611149][T11459] netlink: 'syz.4.1434': attribute type 4 has an invalid length. [ 202.620429][ T5818] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.623808][T11459] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1434'. [ 202.626542][ T5818] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 202.629834][ T5818] usb 7-1: Manufacturer: syz [ 202.633795][ T5818] usb 7-1: config 0 descriptor?? [ 202.650155][T11459] .`: renamed from bond0 (while UP) [ 202.694054][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 202.715255][T11457] netlink: 'syz.1.1447': attribute type 10 has an invalid length. [ 202.717881][T11457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1447'. [ 202.723665][T11457] dummy0: entered promiscuous mode [ 202.725583][T11457] batman_adv: batadv0: Interface activated: dummy0 [ 202.727764][T11457] batadv0: mtu less than device minimum [ 202.731582][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.735383][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.738985][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.742677][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.747180][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.751107][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.755125][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.758753][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.762453][T11457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.772776][T11457] batman_adv: batadv0: Interface deactivated: dummy0 [ 202.774962][T11457] batman_adv: batadv0: Removing interface: dummy0 [ 202.779899][ T5810] usb 9-1: USB disconnect, device number 19 [ 202.801908][ T29] usb 11-1: USB disconnect, device number 6 [ 203.042104][ T5818] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 203.046961][ T5818] appleir 0003:05AC:8243.0016: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 203.257539][ T5818] usb 7-1: USB disconnect, device number 16 [ 203.577492][T11498] tmpfs: User quota inode hardlimit too large. [ 203.580111][T11498] tmpfs: User quota inode hardlimit too large. [ 203.582755][T11498] tmpfs: User quota inode hardlimit too large. [ 203.585526][T11498] tmpfs: User quota inode hardlimit too large. [ 203.587540][T11498] tmpfs: User quota inode hardlimit too large. [ 203.589890][T11498] tmpfs: User quota inode hardlimit too large. [ 203.592415][T11498] tmpfs: User quota inode hardlimit too large. [ 203.595385][T11498] tmpfs: User quota inode hardlimit too large. [ 203.597882][T11498] tmpfs: User quota inode hardlimit too large. [ 203.600307][T11498] tmpfs: User quota inode hardlimit too large. [ 203.602814][T11498] tmpfs: User quota inode hardlimit too large. [ 203.605754][T11498] tmpfs: User quota inode hardlimit too large. [ 203.608593][T11498] tmpfs: User quota inode hardlimit too large. [ 203.611576][T11498] tmpfs: User quota inode hardlimit too large. [ 203.614804][T11498] tmpfs: User quota inode hardlimit too large. [ 203.617551][T11498] tmpfs: User quota inode hardlimit too large. [ 203.620292][T11498] tmpfs: User quota inode hardlimit too large. [ 203.623046][T11498] tmpfs: User quota inode hardlimit too large. [ 203.627668][T11498] tmpfs: User quota inode hardlimit too large. [ 203.630375][T11498] tmpfs: User quota inode hardlimit too large. [ 203.633062][T11498] tmpfs: User quota inode hardlimit too large. [ 203.647653][T11498] tmpfs: User quota inode hardlimit too large. [ 203.650626][T11498] tmpfs: User quota inode hardlimit too large. [ 203.653853][T11498] tmpfs: User quota inode hardlimit too large. [ 203.656789][T11498] tmpfs: User quota inode hardlimit too large. [ 203.659599][T11498] tmpfs: User quota inode hardlimit too large. [ 203.662029][T11498] tmpfs: User quota inode hardlimit too large. [ 203.664962][T11498] tmpfs: User quota inode hardlimit too large. [ 203.667767][T11498] tmpfs: User quota inode hardlimit too large. [ 203.668138][T11495] kvm: pic: non byte write [ 203.670371][T11498] tmpfs: User quota inode hardlimit too large. [ 203.674673][T11498] tmpfs: User quota inode hardlimit too large. [ 203.677441][T11498] tmpfs: User quota inode hardlimit too large. [ 203.680250][T11498] tmpfs: User quota inode hardlimit too large. [ 203.680856][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 203.719938][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 203.719960][ T42] audit: type=1400 audit(1786681735.684:32086): avc: denied { sqpoll } for pid=11506 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 203.798826][ T42] audit: type=1400 audit(1786681735.764:32087): avc: denied { read } for pid=11513 comm="syz.4.1458" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.806287][ T42] audit: type=1400 audit(1786681735.764:32088): avc: denied { open } for pid=11513 comm="syz.4.1458" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.850412][ T42] audit: type=1400 audit(1786681735.814:32089): avc: denied { getattr } for pid=11513 comm="syz.4.1458" path="pid:[4026532866]" dev="nsfs" ino=4026532866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.851823][T11530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1463'. [ 205.943459][ T5725] Bluetooth: hci0: command 0x0406 tx timeout [ 205.943729][T11514] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.793146][T11514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.798699][T11514] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.822182][T11514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.825158][T11514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 206.837999][T11514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 206.843937][T11514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.846040][T11514] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.849472][T11514] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.977340][ T42] audit: type=1400 audit(1786681738.944:32090): avc: denied { read } for pid=11545 comm="syz.1.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.040437][ T42] audit: type=1400 audit(1786681739.004:32091): avc: denied { write } for pid=11555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.057894][ T42] audit: type=1400 audit(1786681739.024:32092): avc: denied { name_bind } for pid=11561 comm="syz.6.1473" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 207.085107][ T42] audit: type=1400 audit(1786681739.054:32093): avc: denied { write } for pid=11566 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.157880][ T42] audit: type=1400 audit(1786681739.124:32094): avc: denied { write } for pid=11568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.158808][T11560] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 207.163595][ T1350] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 207.173957][T11560] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 207.181575][T11560] netlink: 'syz.4.1472': attribute type 1 has an invalid length. [ 207.185646][T11560] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1472'. [ 207.205651][ T42] audit: type=1400 audit(1786681739.174:32095): avc: denied { write } for pid=11571 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.237165][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 207.240092][T11573] netlink: 'syz.4.1474': attribute type 10 has an invalid length. [ 207.242609][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 207.336646][ T1350] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.341865][ T1350] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.348281][ T1350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.352908][ T1350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.366438][ T1350] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.373336][ T1350] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.376490][ T1350] usb 7-1: Manufacturer: syz [ 207.415706][ T1350] usb 7-1: config 0 descriptor?? [ 207.784537][T11606] Unsupported ieee802154 address type: 0 [ 207.836123][ T1350] usbhid 7-1:0.0: can't add hid device: -71 [ 207.838128][ T1350] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 207.843065][ T1350] usb 7-1: USB disconnect, device number 17 [ 207.883657][ T5818] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 207.919189][T11612] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 207.921851][T11612] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1480'. [ 207.926385][T11612] .`: renamed from bond0 [ 207.930778][T11612] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1480'. [ 208.020403][T11620] loop2: detected capacity change from 0 to 7 [ 208.023561][ T5725] Bluetooth: hci3: command 0x0405 tx timeout [ 208.036416][T11620] Dev loop2: unable to read RDB block 7 [ 208.038898][T11620] loop2: unable to read partition table [ 208.041463][T11620] loop2: partition table beyond EOD, truncated [ 208.045529][ T5818] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 208.049546][ T5818] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 208.056287][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.061621][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.062637][T11620] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 208.069684][ T5818] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 208.070740][ T5818] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 208.073382][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1484'. [ 208.073678][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1484'. [ 208.073868][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1484'. [ 208.074056][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1484'. [ 208.083849][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1484'. [ 208.097128][ T5818] usb 9-1: Manufacturer: syz [ 208.107379][ T5818] usb 9-1: config 0 descriptor?? [ 208.316107][ T5818] usbhid 9-1:0.0: can't add hid device: -71 [ 208.318154][ T5818] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 208.330889][ T5818] usb 9-1: USB disconnect, device number 20 [ 208.412872][T11654] Cannot find add_set index 0 as target [ 208.416589][ T1350] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 208.594495][ T1350] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.598931][ T1350] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 208.603003][ T1350] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 208.608972][ T1350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.611547][ T1350] usb 6-1: Product: syz [ 208.612898][ T1350] usb 6-1: Manufacturer: syz [ 208.614682][ T1350] usb 6-1: SerialNumber: syz [ 208.641562][ T34] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.823545][ T5725] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.849988][ T5810] usb 6-1: USB disconnect, device number 25 [ 208.904176][ T5725] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.703506][ T34] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 209.705811][ T34] ath9k_htc: Failed to initialize the device [ 209.708178][ T5810] usb 6-1: ath9k_htc: USB layer deinitialized [ 210.024632][ T5810] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 210.103440][ T5725] Bluetooth: hci3: command 0x0405 tx timeout [ 210.183441][ T5810] usb 6-1: Using ep0 maxpacket: 32 [ 210.185660][ T5810] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 210.189436][ T5810] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 210.192694][ T5810] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 210.198441][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.201106][ T5810] usb 6-1: Product: syz [ 210.202431][ T5810] usb 6-1: Manufacturer: syz [ 210.204114][ T5810] usb 6-1: SerialNumber: syz [ 210.219209][ T5810] ldusb 6-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 210.903769][ T5725] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.983493][ T5725] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.429113][ T5818] usb 6-1: USB disconnect, device number 26 [ 211.436776][ T5818] ldusb 6-1:1.0: LD USB Device #0 now disconnected [ 212.995897][ T5725] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.063403][ T5725] Bluetooth: hci4: command 0x0c1a tx timeout [ 225.525814][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 225.525850][ T42] audit: type=1400 audit(1786681757.484:32119): avc: denied { block_suspend } for pid=11664 comm="syz.6.1494" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.552403][T11676] jffs2: notice: (11676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 2 orphan) found. [ 225.652350][T11696] tmpfs: Bad value for 'mpol' [ 225.660111][T11696] fuse: Unknown parameter 'group_*1u&d' [ 225.809739][ T42] audit: type=1400 audit(1786681757.774:32120): avc: denied { mounton } for pid=11710 comm="syz.2.1501" path="/434/config" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.847367][ T42] audit: type=1400 audit(1786681757.804:32121): avc: denied { write } for pid=11710 comm="syz.2.1501" name="functions" dev="configfs" ino=16508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.867637][ T42] audit: type=1400 audit(1786681757.804:32122): avc: denied { write } for pid=11710 comm="syz.2.1501" name="c.1" dev="configfs" ino=21165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.879045][ T42] audit: type=1400 audit(1786681757.804:32123): avc: denied { create } for pid=11710 comm="syz.2.1501" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 225.888656][ T42] audit: type=1400 audit(1786681757.804:32124): avc: denied { write } for pid=11710 comm="syz.2.1501" name="c.1" dev="configfs" ino=21165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.964929][ T42] audit: type=1400 audit(1786681757.934:32125): avc: denied { write } for pid=11721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.013584][ T42] audit: type=1400 audit(1786681757.974:32126): avc: denied { write } for pid=11728 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.013621][ T6817] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 226.033467][ T59] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 226.046329][ T42] audit: type=1400 audit(1786681758.014:32127): avc: denied { mount } for pid=11731 comm="syz.1.1506" name="/" dev="autofs" ino=44073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 226.070042][ T42] audit: type=1400 audit(1786681758.034:32128): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 226.184072][ T59] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 226.189190][ T59] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 226.193402][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.197278][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.197405][ T6817] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 226.203926][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 226.209377][ T59] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 226.212291][ T59] usb 9-1: Manufacturer: syz [ 226.216695][ T59] usb 9-1: config 0 descriptor?? [ 226.221441][ T6817] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 226.224957][ T6817] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.228267][ T6817] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.231349][ T6817] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 226.236441][ T6817] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 226.239295][ T6817] usb 11-1: Manufacturer: syz [ 226.242787][ T6817] usb 11-1: config 0 descriptor?? [ 226.424773][ T59] usbhid 9-1:0.0: can't add hid device: -71 [ 226.426853][ T59] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 226.435188][ T59] usb 9-1: USB disconnect, device number 21 [ 226.451787][ T6817] usbhid 11-1:0.0: can't add hid device: -71 [ 226.454045][ T6817] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 226.461677][ T6817] usb 11-1: USB disconnect, device number 7 [ 226.633669][T11765] team0: entered allmulticast mode [ 226.635505][T11765] team_slave_0: entered allmulticast mode [ 226.637463][T11765] team_slave_1: entered allmulticast mode [ 226.665163][T11771] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 226.668397][T11771] SELinux: failed to load policy [ 226.913799][ T5818] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 226.936771][T11787] __nla_validate_parse: 3 callbacks suppressed [ 226.936786][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 227.073646][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 227.078561][ T5818] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 227.086313][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.091927][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.096108][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.101444][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.106511][T11791] syzkaller1: entered promiscuous mode [ 227.107515][ T5818] usb 6-1: config 0 descriptor?? [ 227.108283][T11791] syzkaller1: entered allmulticast mode [ 227.181168][T11793] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1521'. [ 227.473405][ T1350] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 227.644945][ T1350] usb 11-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 227.654437][ T1350] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.659546][ T1350] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.676054][T11800] net_ratelimit: 18 callbacks suppressed [ 227.676073][T11800] openvswitch: netlink: IPv6 tunnel dst address is zero [ 227.687412][ T1350] as10x_usb: device has been detected [ 227.692668][ T1350] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 227.721766][ T5818] usbhid 6-1:0.0: can't add hid device: -32 [ 227.725366][ T5818] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 227.734434][ T5818] usb 6-1: USB disconnect, device number 27 [ 227.766623][T11804] loop4: detected capacity change from 0 to 7 [ 227.784116][ T1350] usb 11-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 227.791792][T11783] blk_print_req_error: 10 callbacks suppressed [ 227.791806][T11783] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.798805][T11783] buffer_io_error: 10 callbacks suppressed [ 227.798819][T11783] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.811246][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.817167][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.824883][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.828069][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.830550][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.834285][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.837239][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.840275][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.842876][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.847814][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.850421][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.853913][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.856536][T11804] ldm_validate_partition_table(): Disk read failed. [ 227.858712][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.862058][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.864961][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.867990][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.870543][T11804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 227.874656][T11804] Buffer I/O error on dev loop4, logical block 0, async page read [ 227.877702][T11804] Dev loop4: unable to read RDB block 0 [ 227.879538][T11804] loop4: unable to read partition table [ 227.881716][T11804] loop4: partition table beyond EOD, truncated [ 227.888616][T11804] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 227.897965][ T1350] as10x_usb: error during firmware upload part1 [ 227.900694][ T1350] Registered device Abilis Systems DVB-Titan [ 228.075096][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 228.183412][T11793] comedi comedi1: reset error (fatal) [ 228.244248][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 228.249133][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 228.254299][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.259501][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.263617][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 228.270419][ T10] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 228.282798][ T10] usb 9-1: Manufacturer: syz [ 228.289539][ T10] usb 9-1: config 0 descriptor?? [ 228.368228][T11823] ================================================================== [ 228.371608][T11823] BUG: KASAN: slab-use-after-free in netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.374931][T11823] Read of size 4 at addr ffff88805aaf018c by task syz.2.1529/11823 [ 228.379231][T11823] [ 228.380913][T11823] CPU: 2 UID: 0 PID: 11823 Comm: syz.2.1529 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.380942][T11823] Tainted: [L]=SOFTLOCKUP [ 228.380950][T11823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.380972][T11823] Call Trace: [ 228.380989][T11823] [ 228.380998][T11823] dump_stack_lvl+0x100/0x190 [ 228.381065][T11823] print_report+0x13d/0x4b0 [ 228.381111][T11823] ? __virt_addr_valid+0x239/0x430 [ 228.381160][T11823] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.381189][T11823] kasan_report+0xdf/0x1c0 [ 228.381228][T11823] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.381257][T11823] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.381291][T11823] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 228.381323][T11823] netdev_nl_queue_dump_one+0x189/0x380 [ 228.381350][T11823] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 228.381378][T11823] genl_dumpit+0x125/0x230 [ 228.381411][T11823] netlink_dump+0x532/0xd00 [ 228.381435][T11823] ? __pfx_netlink_dump+0x10/0x10 [ 228.381451][T11823] ? __kasan_kmalloc+0xaa/0xb0 [ 228.381473][T11823] ? __asan_memset+0x23/0x50 [ 228.381501][T11823] ? genl_start+0x67a/0x970 [ 228.381522][T11823] __netlink_dump_start+0x6d6/0x990 [ 228.381540][T11823] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 228.381562][T11823] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 228.381584][T11823] ? stack_depot_save_flags+0x27/0x9d0 [ 228.381632][T11823] ? __pfx_genl_get_cmd+0x10/0x10 [ 228.381651][T11823] ? __pfx_genl_start+0x10/0x10 [ 228.381670][T11823] ? __pfx_genl_dumpit+0x10/0x10 [ 228.381688][T11823] ? __pfx_genl_done+0x10/0x10 [ 228.381709][T11823] ? ____sys_sendmsg+0xa4d/0xbe0 [ 228.381738][T11823] ? ___sys_sendmsg+0x190/0x1e0 [ 228.381755][T11823] ? __radix_tree_lookup+0x217/0x2b0 [ 228.381824][T11823] genl_rcv_msg+0x471/0x800 [ 228.381850][T11823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.381875][T11823] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 228.381911][T11823] ? __lock_acquire+0x49f/0x1a40 [ 228.381943][T11823] netlink_rcv_skb+0x159/0x420 [ 228.381961][T11823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.381983][T11823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.382005][T11823] ? netlink_deliver_tap+0x1ae/0xcc0 [ 228.382022][T11823] genl_rcv+0x28/0x40 [ 228.382040][T11823] netlink_unicast+0x585/0x850 [ 228.382060][T11823] ? __pfx_netlink_unicast+0x10/0x10 [ 228.382081][T11823] netlink_sendmsg+0x8b0/0xda0 [ 228.382099][T11823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.382121][T11823] ? selinux_socket_sendmsg+0x198/0x2f0 [ 228.382146][T11823] ____sys_sendmsg+0xa4d/0xbe0 [ 228.382166][T11823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.382182][T11823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.382208][T11823] ___sys_sendmsg+0x190/0x1e0 [ 228.382222][T11823] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.382235][T11823] ? __lock_acquire+0x49f/0x1a40 [ 228.382263][T11823] __sys_sendmsg+0x160/0x210 [ 228.382287][T11823] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.382315][T11823] do_syscall_64+0x115/0x870 [ 228.382341][T11823] ? clear_bhb_loop+0x70/0xc0 [ 228.382364][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.382383][T11823] RIP: 0033:0x7f9d7bf9e0d9 [ 228.382401][T11823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.382421][T11823] RSP: 002b:00007f9d7cf32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.382457][T11823] RAX: ffffffffffffffda RBX: 00007f9d7c225fa0 RCX: 00007f9d7bf9e0d9 [ 228.382470][T11823] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 228.382483][T11823] RBP: 00007f9d7c035024 R08: 0000000000000000 R09: 0000000000000000 [ 228.382495][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.382508][T11823] R13: 00007f9d7c226038 R14: 00007f9d7c225fa0 R15: 00007ffd67044e68 [ 228.382524][T11823] [ 228.382530][T11823] [ 228.525894][T11823] Allocated by task 11544: [ 228.527731][T11823] kasan_save_stack+0x30/0x50 [ 228.529721][T11823] kasan_save_track+0x14/0x30 [ 228.531695][T11823] __kasan_kmalloc+0xaa/0xb0 [ 228.533597][T11823] __kmalloc_noprof+0x322/0x820 [ 228.535537][T11823] __register_sysctl_table+0xac/0x1650 [ 228.537836][T11823] neigh_sysctl_register+0x326/0x660 [ 228.540031][T11823] devinet_sysctl_register+0xb6/0x210 [ 228.542202][T11823] inetdev_init+0x2b8/0x570 [ 228.544089][T11823] inetdev_event+0x7fa/0x17f0 [ 228.546006][T11823] notifier_call_chain+0x99/0x3f0 [ 228.548144][T11823] call_netdevice_notifiers_info+0xbe/0x110 [ 228.550552][T11823] register_netdevice+0x1998/0x25a0 [ 228.552657][T11823] __tun_chr_ioctl+0x1ded/0x47c0 [ 228.554708][T11823] __x64_sys_ioctl+0x18e/0x210 [ 228.556804][T11823] do_syscall_64+0x115/0x870 [ 228.558698][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.561090][T11823] [ 228.562050][T11823] Freed by task 23: [ 228.563638][T11823] kasan_save_stack+0x30/0x50 [ 228.565626][T11823] kasan_save_track+0x14/0x30 [ 228.567672][T11823] kasan_save_free_info+0x3b/0x70 [ 228.569807][T11823] __kasan_slab_free+0x5f/0x80 [ 228.571861][T11823] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 228.574136][T11823] rcu_free_sheaf+0x1a/0xe0 [ 228.576031][T11823] rcu_core+0x5a2/0x10d0 [ 228.577903][T11823] handle_softirqs+0x1ea/0x9b0 [ 228.579976][T11823] run_ksoftirqd+0x38/0x60 [ 228.581955][T11823] smpboot_thread_fn+0x3d3/0xaa0 [ 228.584032][T11823] kthread+0x370/0x450 [ 228.585742][T11823] ret_from_fork+0x72b/0xd50 [ 228.587782][T11823] ret_from_fork_asm+0x1a/0x30 [ 228.589858][T11823] [ 228.590907][T11823] The buggy address belongs to the object at ffff88805aaf0000 [ 228.590907][T11823] which belongs to the cache kmalloc-cg-1k of size 1024 [ 228.596656][T11823] The buggy address is located 396 bytes inside of [ 228.596656][T11823] freed 1024-byte region [ffff88805aaf0000, ffff88805aaf0400) [ 228.602246][T11823] [ 228.603279][T11823] The buggy address belongs to the physical page: [ 228.605841][T11823] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5aaf0 [ 228.609568][T11823] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.613101][T11823] memcg:ffff88805aaf0411 [ 228.614859][T11823] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 228.618022][T11823] page_type: f5(slab) [ 228.619788][T11823] raw: 00fff00000000040 ffff88801bc4c000 dead000000000100 dead000000000122 [ 228.623325][T11823] raw: 0000000000000000 0000080000100010 00000000f5000000 ffff88805aaf0411 [ 228.626941][T11823] head: 00fff00000000040 ffff88801bc4c000 dead000000000100 dead000000000122 [ 228.630560][T11823] head: 0000000000000000 0000080000100010 00000000f5000000 ffff88805aaf0411 [ 228.634158][T11823] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 228.637722][T11823] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 228.641209][T11823] page dumped because: kasan: bad access detected [ 228.643810][T11823] page_owner tracks the page as allocated [ 228.645909][T11823] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5727, tgid 5727 (syz-executor), ts 59057989807, free_ts 59011883720 [ 228.653970][T11823] post_alloc_hook+0xfd/0x120 [ 228.656004][T11823] get_page_from_freelist+0xf48/0x3530 [ 228.658204][T11823] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 228.660633][T11823] new_slab+0xa2/0x640 [ 228.662414][T11823] refill_objects+0xe3/0x410 [ 228.664427][T11823] __pcs_replace_empty_main+0x376/0x680 [ 228.666627][T11823] __kvmalloc_node_noprof+0x793/0x970 [ 228.668822][T11823] xt_alloc_table_info+0x44/0xa0 [ 228.670854][T11823] do_ip6t_set_ctl+0x611/0xd00 [ 228.672868][T11823] nf_setsockopt+0x8d/0xf0 [ 228.674785][T11823] ipv6_setsockopt+0x135/0x170 [ 228.676801][T11823] tcp_setsockopt+0xa7/0x100 [ 228.678780][T11823] do_sock_setsockopt+0xf3/0x1d0 [ 228.680853][T11823] __sys_setsockopt+0x195/0x220 [ 228.682879][T11823] __x64_sys_setsockopt+0xbd/0x160 [ 228.685067][T11823] do_syscall_64+0x115/0x870 [ 228.687006][T11823] page last free pid 5727 tgid 5727 stack trace: [ 228.689590][T11823] __free_frozen_pages+0x79f/0x1090 [ 228.691776][T11823] qlist_free_all+0x47/0xf0 [ 228.693636][T11823] kasan_quarantine_reduce+0x1a0/0x1f0 [ 228.695874][T11823] __kasan_slab_alloc+0x69/0x90 [ 228.697851][T11823] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 228.700098][T11823] do_getname+0x35/0x390 [ 228.701915][T11823] __x64_sys_unlinkat+0xa0/0x130 [ 228.704028][T11823] do_syscall_64+0x115/0x870 [ 228.706022][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.708560][T11823] [ 228.709659][T11823] Memory state around the buggy address: [ 228.712059][T11823] ffff88805aaf0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.715400][T11823] ffff88805aaf0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.718799][T11823] >ffff88805aaf0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.722168][T11823] ^ [ 228.723951][T11823] ffff88805aaf0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.727181][T11823] ffff88805aaf0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.730446][T11823] ================================================================== [ 228.734914][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 228.735697][T11823] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.735718][T11823] CPU: 2 UID: 0 PID: 11823 Comm: syz.2.1529 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.735744][T11823] Tainted: [L]=SOFTLOCKUP [ 228.735751][T11823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.735763][T11823] Call Trace: [ 228.735770][T11823] [ 228.735777][T11823] dump_stack_lvl+0x100/0x190 [ 228.735805][T11823] vpanic+0x552/0x970 [ 228.735824][T11823] ? __pfx_vpanic+0x10/0x10 [ 228.735841][T11823] ? mark_held_locks+0x40/0x70 [ 228.735865][T11823] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.735889][T11823] panic+0xd1/0xe0 [ 228.735905][T11823] ? __pfx_panic+0x10/0x10 [ 228.735923][T11823] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.735945][T11823] ? preempt_schedule_common+0x42/0xc0 [ 228.735972][T11823] check_panic_on_warn.cold+0x19/0x34 [ 228.735989][T11823] end_report.part.0+0x3a/0x90 [ 228.736013][T11823] kasan_report.cold+0xe/0x18 [ 228.736061][T11823] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.736091][T11823] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 228.736117][T11823] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 228.736147][T11823] netdev_nl_queue_dump_one+0x189/0x380 [ 228.736171][T11823] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 228.736207][T11823] genl_dumpit+0x125/0x230 [ 228.736234][T11823] netlink_dump+0x532/0xd00 [ 228.736252][T11823] ? __pfx_netlink_dump+0x10/0x10 [ 228.736269][T11823] ? __kasan_kmalloc+0xaa/0xb0 [ 228.736291][T11823] ? __asan_memset+0x23/0x50 [ 228.736309][T11823] ? genl_start+0x67a/0x970 [ 228.736328][T11823] __netlink_dump_start+0x6d6/0x990 [ 228.736349][T11823] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 228.736371][T11823] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 228.736391][T11823] ? stack_depot_save_flags+0x27/0x9d0 [ 228.736418][T11823] ? __pfx_genl_get_cmd+0x10/0x10 [ 228.736435][T11823] ? __pfx_genl_start+0x10/0x10 [ 228.736452][T11823] ? __pfx_genl_dumpit+0x10/0x10 [ 228.736470][T11823] ? __pfx_genl_done+0x10/0x10 [ 228.736490][T11823] ? ____sys_sendmsg+0xa4d/0xbe0 [ 228.736515][T11823] ? ___sys_sendmsg+0x190/0x1e0 [ 228.736530][T11823] ? __radix_tree_lookup+0x217/0x2b0 [ 228.736553][T11823] genl_rcv_msg+0x471/0x800 [ 228.736573][T11823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.736597][T11823] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 228.736622][T11823] ? __lock_acquire+0x49f/0x1a40 [ 228.736644][T11823] netlink_rcv_skb+0x159/0x420 [ 228.736661][T11823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.736681][T11823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.736702][T11823] ? netlink_deliver_tap+0x1ae/0xcc0 [ 228.736719][T11823] genl_rcv+0x28/0x40 [ 228.736736][T11823] netlink_unicast+0x585/0x850 [ 228.736755][T11823] ? __pfx_netlink_unicast+0x10/0x10 [ 228.736774][T11823] netlink_sendmsg+0x8b0/0xda0 [ 228.736805][T11823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.825088][T11823] ? selinux_socket_sendmsg+0x198/0x2f0 [ 228.826767][T11823] ____sys_sendmsg+0xa4d/0xbe0 [ 228.828288][T11823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.829961][T11823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.831652][T11823] ___sys_sendmsg+0x190/0x1e0 [ 228.833160][T11823] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.834786][T11823] ? __lock_acquire+0x49f/0x1a40 [ 228.836346][T11823] __sys_sendmsg+0x160/0x210 [ 228.837802][T11823] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.839441][T11823] do_syscall_64+0x115/0x870 [ 228.840905][T11823] ? clear_bhb_loop+0x70/0xc0 [ 228.842352][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.844216][T11823] RIP: 0033:0x7f9d7bf9e0d9 [ 228.845618][T11823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.851383][T11823] RSP: 002b:00007f9d7cf32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.853957][T11823] RAX: ffffffffffffffda RBX: 00007f9d7c225fa0 RCX: 00007f9d7bf9e0d9 [ 228.856384][T11823] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 228.858854][T11823] RBP: 00007f9d7c035024 R08: 0000000000000000 R09: 0000000000000000 [ 228.861276][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.863693][T11823] R13: 00007f9d7c226038 R14: 00007f9d7c225fa0 R15: 00007ffd67044e68 [ 228.866088][T11823] [ 228.867763][T11823] Kernel Offset: disabled [ 228.869113][T11823] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:29:19 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88806a43b580 RCX=0000000000000001 RDX=1ffff1100d4876e3 RSI=ffffffff8e183e52 RDI=ffff88806a43b580 RBP=ffff88806a43b580 RSP=ffffc900001679d0 R8 =0000000000000000 R9 =fffffbfff224331a R10=ffffffff912198d7 R11=00000000000003e7 R12=ffff88806a43b718 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81d8d65e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5de9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f11081556c8 CR3=00000000374fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000ffff000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff28c87e96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff28c87e96 00007fff28c87e9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1107435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1107435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11074357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1107435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffd4000257969 RBX=ffffea00012bcb48 RCX=dffffc0000000000 RDX=ffff88802a56ca80 RSI=ffffffff82606754 RDI=ffff88802a56ca80 RBP=0000000000000001 RSP=ffffc900040af548 R8 =0000000000000006 R9 =000000000005d000 R10=000000000004ae00 R11=0000000000000000 R12=0000000000000008 R13=000000000000bdf8 R14=ffff8880274ff940 R15=ffffea00012bcb40 RIP=ffffffff82606779 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555572f9b500 ffffffff 00c00000 GS =0000 ffff8880d5ee9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9d7cd5da08 CR3=00000000374fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555563c41de0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d21f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d21f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555563c4cdc8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800316a9cdc08010 000108001084e410 0006100005808008 0000040c0144d83c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008004f90007465 6e2d74736f68762f 7665642f01ffffff ffffffffffe10806 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000150008 0200001225dfdbfe 0000040000013208 018c030100000404 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d820a08808006003 0010005003001000 4003021000300348 1000099003010008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808080801000 0004010000020806 06015fd820a08808 0060030010005003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010004003021000 3003481000099003 0100080000000000 1500080200001225 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dfdbfe0000040000 013208018c030100 0004040601880300 0000240808018003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180040980030980 0420030008001003 0fffffffffffff04 0003010000020806 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 495f455551494e55 5f5f207220343232 3133646239666666 66666666660a3037 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7220303432313364 6239666666666666 66660a3936385f6f 666e69646f6d5f44 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666666666666660a 3836385f6f666e69 646f6d5f44495f45 5551494e555f5f20 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666666 0a3537375f6f666e 69646f6d5f44495f 455551494e555f5f ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 375f6f666e69646f 6d5f44495f455551 494e555f5f207220 3736333233646239 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 495f455551494e55 5f5f207220376133 3233646239666666 66666666660a3437 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7220376533323364 6239666666666666 66660a3337375f6f 666e69646f6d5f44 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35035 RDI=ffffffff9b9faec0 RBP=ffffffff9b9fae80 RSP=ffffc9000cc06c50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b6ed1e4 R15=ffffffff85a34fd0 RIP=ffffffff85a3505f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9d7cf326c0 ffffffff 00c00000 GS =0000 ffff8880d5fe9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9d7cf31ff8 CR3=0000000025f97000 CR4=00352ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd67045356 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd67045356 00007ffd6704535c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c0357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c1f25f8 00007f9d7c1f25c8 00007f9d7c1f2600 00007f9d7c1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001d57f5 RBX=ffff88801eed2540 RCX=ffffffff8bbaf335 RDX=0000000000000000 RSI=ffffffff8e1a9ca0 RDI=ffffffff8c400480 RBP=ffffed1003dda4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbad8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60e9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=0000000025f97000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7cd5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd67045356 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd67045356 00007ffd6704535c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c0357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c1f2600 00007f9d7c1f25e0 00007f9d7c1f25e8 00007f9d7c1f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9d7c1f25f8 00007f9d7c1f25c8 00007f9d7c1f2600 00007f9d7c1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000